You configure the following access list:access-list 110 deny tcp 10.1....
If you add an access list to an interface and you do not have at least one permit statement, then you will effectively shut down the interface because of the implicit deny any at the end of every list.
View all questions of this test
You configure the following access list:access-list 110 deny tcp 10.1....
Explanation:
The access list configuration provided has three entries:
1. access-list 110 deny tcp 10.1.1.128 0.0.0.63 any eq smtp: This entry denies TCP traffic with a source IP address of 10.1.1.128 to any destination IP address on port 25 (SMTP).
2. access-list 110 deny tcp any eq 23: This entry denies TCP traffic from any source IP address to any destination IP address on port 23 (Telnet).
3. int ethernet 0
ip access-group 110 out: This configuration applies access list 110 to the outbound traffic on interface Ethernet0.
Based on the given access list configuration, the result will be option D: No IP traffic will be allowed out E0. Here's why:
- The first entry denies SMTP traffic (port 25) from the source IP range 10.1.1.128 to any destination. This means that email traffic from the specified range will be blocked.
- The second entry denies Telnet traffic (port 23) from any source to any destination. This means that Telnet traffic from any IP address will be blocked.
- The access list is applied on the outbound direction of Ethernet0 interface. This means that any IP traffic attempting to leave the Ethernet0 interface will be subject to the access list rules.
Therefore, since the access list denies both SMTP and Telnet traffic, and it is applied to the outbound traffic on Ethernet0, no IP traffic will be allowed to leave Ethernet0.