Discuss Cisco 350-501 Exam Topic 4 Question 133

Refer to the exhibit.

Refer to the exhibit. A network engineer installed router R1 as the new core router and must secure the control plane. The configuration has been applied, and now the engineer is creating ACL 120. Only hosts 192.168.1.1 and 192.168.2.2 should be allowed to access the router using Telnet. All other hosts should be rate-limited, with excess traffic dropped. Which configuration accomplishes this goal?

Aaccess-list 120 deny tcp any any eq telnet
access-list 120 permit tcp host 192.168.1.1 any eq telnet
access-list 120 permit tcp host 192.168.1.2 any eq telnet

Baccess-list 120 deny tcp host 192.168.1.1 any eq telnet
access-list 120 deny tcp host 192.168.1.2 any eq telnet
access-list 120 permit tcp any any eq telnet

Caccess-list 120 permit tcp host 192.168.1.1 any eq telnet
access-list 120 permit tcp host 192.168.2.2 any eq telnet
access-list 120 deny tcp any any eq telnet

Daccess-list 120 permit tcp any any eq telnet
access-list 120 deny tcp host 192.168.1.1 any eq telnet
access-list 120 deny tcp host 192.168.1.2 any eq telnet

Suggested Answer: A

Get Premium 350-501 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

14 comments · newest first

Raymon 2 days ago

I feel C is clear and straightforward. No confusion there.

Lisha 8 days ago

A is definitely not right. It blocks everything before allowing.

Stephania 13 days ago

But what about option A? It denies all first. Seems risky.

Dorothy 18 days ago

Agreed! C makes sense. It secures the router properly.

Scarlet 23 days ago

I think option C is the best. It allows the right hosts and denies others.

Darnell 28 days ago

I thought we were supposed to block all by default? C seems too permissive.

Detra 1 month ago

B is definitely wrong. Denying access to the allowed hosts makes no sense.

Taryn 1 month ago

Wait, why are we allowing Telnet at all? Isn't it insecure?

Dacia 1 month ago

I agree, C is the way to go!

Marjory 2 months ago

Option C looks correct. Only 192.168.1.1 and 192.168.2.2 can access Telnet.

Horace 2 months ago

I keep mixing up the order of deny and permit statements; I hope I remember that the permits should come before the denies for the ACL to work correctly.

Dominga 2 months ago

I feel like option A is wrong because it denies all Telnet traffic first, which doesn't match the goal of allowing those two specific IPs.

Sylvie 2 months ago

I'm not entirely sure, but I remember a practice question where we had to deny access first and then permit specific hosts. That might be relevant here.

Bronwyn 2 months ago

I think the answer might be C because it allows both specific hosts and denies all others, which seems to fit the requirement.

Cisco 350-501 Exam - Topic 4 Question 133 Discussion