494
Chapter 9
Managing Traffic with Access Lists
9.
If you wanted to deny FTP access from network 200.200.10.0 to net-
work 200.199.11.0, but allow everything else, which of the following
command strings is valid?
A.
access-list 110 deny 200.200.10.0 to network
200.199.11.0 eq ftp
access-list 111 permit ip any 0.0.0.0 255.255.255.255
B.
access-list 1 deny ftp 200.200.10.0 200.199.11.0 any any
C.
access-list 100 deny tcp 200.200.10.0 0.0.0.255
200.199.11.0 0.0.0.255 eq ftp
D.
access-list 198 deny tcp 200.200.10.0 0.0.0.255
200.199.11.0 0.0.0.255 eq ftp
access-list 198 permit ip any 0.0.0.0 255.255.255.255
10.
Which of the following commands will apply IPX SAP access list 1050
for incoming traffic, assuming you're already at interface configuration?
A.
ipx access-group 1050 in
B.
ipx input-sap-filter 1050
C.
ipx access-list 1050 in
D.
ipx input-sap-filter 1050 in
E.
ipx access-group 1050
11.
Which of the following commands will show extended access list 187?
Select all that apply.
A.
sh ip int
B.
sh ip access-list
C.
sh access-list 187
D.
sh access-list 187 extended
12.
What is the extended IP access list range?
A.
199
B.
200299
C.
10001999
D.
100199
Copyright ©2002 SYBEX, Inc., Alameda, CA
www.sybex.com