You want to create a standard access list that denies the subnet of th...
First, you must know that a /21 is 255.255.248.0, which is a block size of 8 in the third octet. Counting by eight, this makes our subnet 144 in the third octet, and the wildcard for the third octet would be 7 since the wildcard is always one less than the block size.
View all questions of this test
You want to create a standard access list that denies the subnet of th...
Explanation:
To create a standard access list that denies the subnet of the given host, we need to determine the appropriate wildcard mask to use in the access list entry.
The given host IP address is 172.16.144.17/21. This means that the network portion of the IP address is 172.16.144.0 and the subnet mask is 255.255.248.0 (which can also be represented as /21 in CIDR notation).
To find the wildcard mask, we subtract each octet of the subnet mask from 255.255.255.255.
Steps:
1. Convert the subnet mask to binary: 11111111.11111111.11111000.00000000
2. Subtract each octet from 255: 00000000.00000000.00000111.11111111
3. Convert the resulting binary to decimal: 0.0.7.255
Now that we have determined the correct wildcard mask, we can create the access list entry.
Answer:
The correct access list entry to deny the subnet of the given host is:
access-list 10 deny 172.16.144.0 0.0.7.255
Explanation of the options:
a) access-list 10 deny 172.16.48.0 255.255.240.0: This option denies a different subnet (172.16.48.0/20) than the one specified in the question. It does not match the given subnet of the host, so it is not the correct answer.
c) access-list 10 deny 172.16.64.0 0.0.31.255: This option denies a different subnet (172.16.64.0/19) than the one specified in the question. It does not match the given subnet of the host, so it is not the correct answer.
d) access-list 10 deny 172.16.136.0 0.0.15.255: This option denies a different subnet (172.16.136.0/20) than the one specified in the question. It does not match the given subnet of the host, so it is not the correct answer.