ActualTests.Cisco.640-802.Exam.Q.and.A.08.15.08-DDU (1130589), страница 71
Текст из файла (страница 71)
Source IP address: 192.168.15.5; destination port: 21B. Source IP Address: 192.168.15.37 destination port: 21C. Source IP Address: 192.168.15.41 destination port: 21D. Source IP Address: 192.168.15.36 destination port: 23Actualtests.com - The Power of Knowing640-802E. Source IP Address: 192.168.15.46; destination port: 23F. Source IP Address: 192.168.15.49 destination port 23Answer: D, EQUESTION 624:You want to control all telnet access going through router CK1 .
Which one of theaccess control list statements below will deny all telnet connections to subnet10.10.1.0/24?A. access-list 15 deny telnet any 10.10.1.0 0.0.0.255 eq 23B. access-list 115 deny udp any 10.10.1.0 eq telnetC. access-list 15 deny tcp 10.10.1.0 255.255.255.0 eq telnetD. access-list 115 deny tcp any 10.10.1.0 0.0.0.255 eq 23E.
access-list 15 deny udp any 10.10.1.0 255.255.255.0 eq 23F. None of the aboveAnswer: DExplanation:Telnet uses port TCP port 23. Since we are using source and destination IP addressinformation, an extended access list is required. Extended access lists are access lists inthe 100-199 range.Incorrect Answers:A, C, E. These access lists are numbered 15. Standard access lists are numbered 1-99,and in this case an extended access lists is required.B. This access list specifies UDP port 23, and TCP port 23 is the port used by telnet.QUESTION 625:You wish to limit telnet access into your Certkiller router to only a single host.
Inorder to accomplish this, access list 1 has been written to allow host 172.16.1.224access to the router vty lines. What command would assign this access- list to theVirtual Terminal Lines?A. CK1 (config-line)# ip access-group 1 inB. CK1 (config-line)# access-class 1 inC.
CK1 (config-line)# ip access-list 1 inD. CK1 (config-line)# access-line 1 inE. None of the aboveAnswer: BActualtests.com - The Power of Knowing640-802Explanation:To restrict incoming and outgoing connections between a particular vty (into a Ciscodevice) and the addresses in an access list, use the access-class command in lineconfiguration mode.Example:The following example defines an access list that permits only the host 172.16.1.224 toconnect to the virtual terminal ports on the router, as described in this question:access-list 1 permit 172.16.1.224 0.0.0.0line 1 5access-class 1 inQUESTION 626:The Certkiller LAN is depicted below:You're the systems administrator at Testing, and you create the following accesscontrol lists.access-list 101 deny tcp 5.1.1.10 0.0.0.0 5.1.3.0 0.0.0.255 eq telnetaccess-list 101 permit ip any anyYou then enter the command "ip access-group 101 in" to apply access control list101 to router CK1 s e0 interface.Which of the following Telnet sessions will be blocked as a result of your accesslists? (Select all that apply)A.
Telnet sessions from host A to host 5.1.1.10B. Telnet sessions from host A to host 5.1.3.10C. Telnet sessions from host B to host 5.1.2.10D. Telnet sessions from host B to host 5.1.3.8E. Telnet sessions from host C to host 5.1.3.10F. Telnet sessions from host F to host 5.1.1.10Answer: DExplanation:All the telnet sessions from the single host (host B) to any device in the 5.1.3.0/24Actualtests.com - The Power of Knowing640-802network will be denied, while all other traffic will be permitted as specified by the secondline in access list 101.QUESTION 627:Which of the following commands would successfully implement an access list on arouters virtual terminal line? (Select only one answer choice)A. RouterCK(config-line)# access-class 10 inB. RouterCK(config-if)# ip access-class 23 outC.
RouterCK(config-line)# access-list 150 inD. RouterCK(config-if)# ip access-list 128 outE. RouterCK(config-line)# access-group 15 outF. RouterCK(config-if)# ip access-group 110 inAnswer: AExplanation:To configure VTY you must be in the config-line mode. Virtual terminal sessions useVTY lines 0-4, and VTY access lists use the access-class command.Incorrect Answers:B. This is placed in the wrong configuration modeC, D, E, F.
The correct syntax for VTY lines is the access-class command, not theaccess-group or access-list commands.QUESTION 628:The following access control list needs to be applied to one of the routers shown inthe graphic:access-list 101 permit tcp 192.168.1.16 0.0.0.15 192.168.2.16 0.0.0.15 eq 23Actualtests.com - The Power of Knowing640-802What can be concluded about this ACL? (Choose two.)A.
Telnet traffic from 192.168.1.16 0.0.0.15 to 192.168.2.16 0.0.0.15 is allowed.B. SMTP traffic from 192.168.2.16 0.0.0.15 to 192.168.1.16 0.0.0.15 is allowed.C. The ACL is configured to allow traffic from one specific host to another.D. When the ACL is applied, Certkiller 1 will be able to ping Certkiller 2.E. The ACL should be applied inbound to the e0 interface of Router A.F. The ACL should be applied outbound to the e0 interface of Router A.Answer: A, EExplanation:The given extended ACL allow the telnet traffic from 192.168.1.16 0.0.0.15 to192.168.2.16 0.0.0.15. Telnet uses TCP port 23.
With access lists, the first networkspecified is the source of the traffic and the second is the destination, so since this accesslist says to allow telnet traffic from the Jackbill1 network to the Certkiller 2 network, itshould be placed on the inbound interface of E0.QUESTION 629:Unauthorized users have used Telnet to gain access to Certkiller router. Thenetwork administrator wants to configure and apply an access list to allow Telnetaccess to the router, but only from the network administrator's computer. Whichgroup of commands would be the best choice to allow only the IP address 172.16.3.3to have Telnet access to the router?A. access-list 101 permit tcp any host 172.16.3.3 eq telnetaccess-list 101 permit ip any anyinterface s0/0ip access-group 101 inB. access-list 3 permit host 172.16.3.3Actualtests.com - The Power of Knowing640-802line vty 0 4ip access-group 3 inC.
access-list 101 permit tcp any host 172.16.3.3 eq telnetinterface s0/0ip access-group 101 inD. access-list 3 permit host 172.16.3.3line vty 0 4access-class 3 inAnswer: DExplanation:To restrict incoming and outgoing connections between a particular vty (into a Ciscodevice) and the addresses in an access list, use the access-class command in lineconfiguration mode.Example:The following example defines an access list that permits only hosts on network192.89.55.0 to connect to the virtual terminal ports on the router:access-list 12 permit 192.89.55.0 0.0.0.255line 1 5access-class 12 inReference:http://www.cisco.com/en/US/products/sw/iosswrel/ps1835/products_command_reference_chapter09186a008008QUESTION 630:An inbound access list has been configured on a Certkiller router. This inboundaccess list has been applied to the serial interface to deny packet entry for TCP andUDP ports 21, 23 and 25.
All other traffic types will be allowed. What types ofpacket will be permitted by this ACL? (Choose three)A. HTTPB. HTTPSC. FTPD. TelnetE. DNSF. SMTPAnswer: A, B, EQUESTION 631:DRAG DROPActualtests.com - The Power of Knowing640-802Two Certkiller offices are displayed below:You work as a network technician at Certkiller .com. Study the exhibit carefully.Certkiller .com has a main office in Los Angeles and a satellite office in Boston. Theoffices are connected through two Cisco routers. The Boston satellite office isconnected through the Certkiller 2 Router s0 interface to the Los Angeles officeCertkiller 1 router s1 interface. Certkiller 1 has two local area networks.
Boston usersreceive Internet access through the Certkiller 1 router.Answer:Actualtests.com - The Power of Knowing640-802QUESTION 632:Observe the following access list configuration:An access list was configured on CK1 with the four statements shown in the graphicabove. Which single access list statement will combine all four of these statementsinto a single statement that will have exactly the same effect?A. access-list 10 permit 172.29.16.0 0.0.0.255B. access-list 10 permit 172.29.16.0 0.0.1.255C. access-list 10 permit 172.29.16.0 0.0.3.255D.
access-list 10 permit 172.29.16.0 0.0.15.255E. access-list 10 permit 172.29.0.0 0.0.255.255F. None of the aboveActualtests.com - The Power of Knowing640-802Answer: CExplanation:172.29.16.0 0.0.3.255 is an aggregate address for those 4 networks. If you would write allthese addresses in binary form and will mark the equal part, than you will see that it is172.29.16.0 0.0.3.255 is the correct wildcard mask as it will aggregate these fourcontiguous ACL statements.QUESTION 633:DRAG DROPYou work as a network technician at Certkiller .com.
You are configuring theCertkiller .com office. In particular the host Certkiller C, with the IP address192.168.125.34/27, needs to be configured so that it cannot access hosts outside its ownsubnet.You decide to use the following command:access-list 100 deny *protocol* *address* *mask* anyYou are required to fill in the *protocol*, *address*, and *mask* in this command usingthe choices below:Actualtests.com - The Power of Knowing640-802Answer:QUESTION 634:On your newly installed router, you apply the access list illustrated below tointerface Ethernet 0 on a Certkiller router. The interface is connected to the192.168.1.8/29 LAN.access-list 123 deny tcp 192.168.166.18 0.0.0.7 eq 20 anyaccess-list 123 deny tcp 192.168.166.18 0.0.0.7 eq 21 anyHow will the above access lists affect traffic?A.
All traffic will be allowed to exit E0 except FTP traffic.B. FTP traffic from 192.168.166.19 to any host will be denied.C. FTP traffic from 192.168.166.22 to any host will be denied.D. All traffic exiting E0 will be denied.E. All FTP traffic to network 192.168.166.18/29 from any host will be denied.F. None of the aboveAnswer: DActualtests.com - The Power of Knowing640-802Explanation:By default every access list contains an implicit deny statement at the end. Because ofthis, only an access list that contains at least one permit statement will be useful.
![](https://s.studizba.com/z.php?f=/templates/si/i/noavatar.png&w=100&h=100&t=1"){kind=avatar}
