access-list 101 deny TCP 172...

Odnośniki

Smutek to uczucie, jak gdyby się tonęło, jak gdyby grzebano cię w ziemi.
int mcrypt_get_key_size ( int cipher) int mcrypt_get_key_size ( string cipher, string module) mcrypt_list_algorithms Funkcja używana do pobrania...
To define the Dreamweaver remote folder: 1 In the Advanced tab of the Site Definition dialog box, select Remote Info from the Category list...
Co Polacy musieli przeżywać w zaborze rosyjskim - dobrze ilustruje list Zygmunta Krasińkiego do Delfiny Potockiej, pisany w styczniu 1848 r...
Access through an interface allows you to treat the interface polymorphically...
600Programowanie w Access 2000Ogólne informacje dotycz¹ce poszczególnych sekcji raportu znajduj¹ siê we i wbudowanej pomocy w aplikacji Microsoft...
php 101 praktycznych skryptow e-book helion interesuje kup ją w księgarni...
name se rver 172...
Zdzisław 74 Grynberg Henryk 101 Grzymała-Siedlecki Adam 116-117 Guilbert Yvette 141 Gumplowicz Ludwik 101 H Habsburgowie 35,68 Haley Bill 136...
tego właśnie powodu dieta niskowęglowodanowa jest również zdrowa dla dzieci...
In inventory systems, the idea is to replace the old paperâshuffling and phone calls with an automated system...

Smutek to uczucie, jak gdyby się tonęło, jak gdyby grzebano cię w ziemi.

16.4.0 0.0.0.255 172.16.3.0 0.0.0.255 eq 21

access-list 101 deny TCP 172.16.4.0 0.0.0.255 172.16.3.0 0.0.0.255 eq 20

access-list 101 permit TCP 172.16.4.0 0.0.0.255 0.0.0.0 255.255.255.255

A. This will block ftp traffic.

B. This will block http traffic.

C. This will permit ftp traffic.

D. This will permit tftp traffic.

Ans:
A
This will block ftp traffic since ftp uses ports 20 and 21.

70 Access lists are numbered. Which of the following ranges could be used for an IP
access
list?
A. 600 - 699

B. 100 - 199

C. 1 - 99

D. 800 - 899

E. 1000 - 1099

Answer: B & C

AppleTalk access lists use numbers in the 600 - 699 range. IP uses 1 - 99 for standard access lists or 100-199 for extended access lists. IPX uses 800 - 899 or 900 - 999 for extended access lists. IPX SAP filters use 1000 - 1099.
CCNA Interview Questions Page 8
<<Previous Next>>
71 Cisco routers use wildcard masking to identify how to check or ignore corresponding
IP address bits. What does setting a wildcard mask bit to 0 cause the router to do?
A. It tells the router to check the corresponding bit value.
B. It tells the router to ignore the corresponding bit value.
C. It tells the router to check its alternate routing list.
D. It tells the router to use its primary routing list.

Ans A
It tells the router to check the corresponding bit value.

72 You are a system administrator and you want to deny access to a group of computers with addresses 172.30.16.0 to 172.30.31.0. Which wildcard mask would you use?
A. 0.0.15.255
B. 0.0.255.255
C. 0.0.31.255
D. 0.0.127.255
E. 0.0.255.255

Ans: A
0.0.15.255 will check the last 13 bits of an address so that computers 172.30.16.0 to 172.30.31.0
will be denied access. 0.0.31.255 would check the last 6 binary digits and deny access to addresses 172.30.32.0 to 172.30.63.0. 0.0.127.255 would check the last 7 binary digits and deny access to addresses 172.30.64.0 to 172.30.127.0. 0.0.255.255 would deny 172.30.0.0 to 172.30.254.0. If you write decimal 15 in binary, you have 0001111, the 1's tell the router to ignore address with these bits set; 0's tell the router to check the bits. The third octet for 172.30.16.0 is 00010000. The third octet for 172.30.31.0 would be 00011111. So, traffic from these addresses would be denied.

73 In order to limit the quantity of numbers that a system administrator has to enter, Cisco can use which abbreviation to indicate 0.0.0.0?
A. host
B. any
C. all
D. include

Ans: A
Cisco uses host to specify 0.0.0.0. This tells the router to check all. Cisco uses any to specify 255.255.255.255. This tells the router to ignore all and permit any address to use an access list test.

74 What do the following commands accomplish?
access-list 1 permit 172.16.0.0 0.0.255.255
interface ethernet 0
IP access-group 1 out
interface ethernet 1
IP access-group 1 out
A. Only traffic from the source network 172.16.0.0 will be blocked.
B. Only traffic from the source network 172.16.0.0 will be forwarded. Non-172.16.0.0 network traffic is blocked.
C. Non-172.16.0.0 traffic will be forwarded.
D. All traffic will be forwarded.

Ans: B
Only traffic from the source network 172.16.0.0 will be forwarded. Non-172.16.0.0 network traffic is blocked. The wildcard mask 0.0.255.255 tells the router to check the first 2 octets and to ignore the last 2 octets.

75 When using access lists, it is important where those access lists are placed. Which statement best describes access list placement?
A. Put standard access lists as near the destination as possible. Put extended access lists as close to the source as possible.
B. Put extended access lists as near the destination as possible. Put standard access lists as close to the source as possible.
C. It isn't import where access lists are placed since the router will read and cache the whole list.
D. Put access lists as close to corporate headquarters as possible.

Ans A
Put standard access lists as near the destination as possible. Put extended access lists as close to the source as possible. Standard access lists don't specify the destination address.

76 As the system administrator, you enter the following commands at the command prompt:
ipx routing
access-list 800 permit 2b 4d
int e0
ipx network 4d
ipx access-group 800 out
int e1
ipx network 2b
int e2
ipx network 3c
What did these command accomplish?
A. Traffic from network 4c destined for network 4d will be forwarded out Ethernet0.
B. Traffic from network 3c destined for network 4d will be forwarded out Ethernet0.
C. Traffic from network 2b destined for network 4d will be forwarded out Ethernet0.
D. Traffic from network 4d destined for network 2d will be forwarded out Ethernet0.

Ans C
Traffic from network 2b destined for network 4d will be forwarded out Ethernet0. The other interfaces E1 and E2 are not subject to the access list since they lack the access group statement to link them to access list 800.

78 The following commands were entered at the command prompt of a Cisco router. What do they accomplish?
access-list 1000 deny 9e.1234.5678.1212 4
access-list 1000 permit -1
interface ethernet 0
ipx network 9e
interface ethernet 1
ipx network 4a
interface serial 0
ipx network 1
ipx output-sap-filter 1000
A. File server advertisements from server 9e.1234.5678.1212 will not be forwarded on interface S0.