• Post author:
  • Post category:Re-Appear
  • Reading time:2 mins read
  • Post last modified:June 12, 2024

Refer to the exhibit. The Gigabit interfaces on both routers have been configured with subinterface numbers that match the VLAN numbers connected to them. PCs on VLAN 10 should be able to print to the P1 printer on VLAN 12. PCs on VLAN 20 should print to the printers on VLAN 22. What interface and in what direction should you place a standard ACL that allows printing to P1 from data VLAN 10, but stops the PCs on VLAN 20 from using the P1 printer? (Choose two.)

CCNA3 v7 – ENSA – Modules 3 – 5 Network Security Exam Answers 06
CCNA3 v7 – ENSA – Modules 3 – 5 Network Security Exam Answers 06
  • R1 Gi0/1.12
  • R1 S0/0/0
  • R2 S0/0/1
  • R2 Gi0/1.20
  • inbound
  • outbound
Answers Explanation & Hints:

A standard access list is commonly placed as close to the destination network as possible because access control expressions in a standard ACL do not include information about the destination network.
The destination in this example is printer VLAN 12 which has router R1 Gigabit subinterface 0/1/.12 as its gateway. A sample standard ACL that only allows printing from data VLAN 10 (, for example, and no other VLAN would be as follows:
R1(config)# access-list 1 permit
R1(config)# access-list 1 deny any
R1(config)# interface gigabitethernet 0/1.12
R1(config-if)# ip access-group 1 out

For more Questions and Answers:

CCNA 3 v7 – ENSA v7.02 – Modules 3 – 5: Network Security Exam Answers Full 100%

Notify of
Inline Feedbacks
View all comments