Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Cisco 350-501 Exam - Topic 4 Question 133 Discussion

Refer to the exhibit.Refer to the exhibit. A network engineer installed router R1 as the new core router and must secure the control plane. The configuration has been applied, and now the engineer is creating ACL 120. Only hosts 192.168.1.1 and 192.168.2.2 should be allowed to access the router using Telnet. All other hosts should be rate-limited, with excess traffic dropped. Which configuration accomplishes this goal?
A) access-list 120 deny tcp any any eq telnet access-list 120 permit tcp host 192.168.1.1 any eq telnet access-list 120 permit tcp host 192.168.1.2 any eq telnet
B) access-list 120 deny tcp host 192.168.1.1 any eq telnet access-list 120 deny tcp host 192.168.1.2 any eq telnet access-list 120 permit tcp any any eq telnet
C) access-list 120 permit tcp host 192.168.1.1 any eq telnet access-list 120 permit tcp host 192.168.2.2 any eq telnet access-list 120 deny tcp any any eq telnet
D) access-list 120 permit tcp any any eq telnet access-list 120 deny tcp host 192.168.1.1 any eq telnet access-list 120 deny tcp host 192.168.1.2 any eq telnet

Cisco 350-501 Exam - Topic 4 Question 133 Discussion

Actual exam question for Cisco's 350-501 exam
Question #: 133
Topic #: 4
[All 350-501 Questions]

Refer to the exhibit.

Refer to the exhibit. A network engineer installed router R1 as the new core router and must secure the control plane. The configuration has been applied, and now the engineer is creating ACL 120. Only hosts 192.168.1.1 and 192.168.2.2 should be allowed to access the router using Telnet. All other hosts should be rate-limited, with excess traffic dropped. Which configuration accomplishes this goal?

Show Suggested Answer Hide Answer
Suggested Answer: A

by Emilio at Aug 13, 2026, 02:24 PM

Limited Time Offer

25%

Off

Get Premium 350-501 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Marjory
4 days ago
Option C looks correct. Only 192.168.1.1 and 192.168.2.2 can access Telnet.
upvoted 0 times
...
Horace
9 days ago
I keep mixing up the order of deny and permit statements; I hope I remember that the permits should come before the denies for the ACL to work correctly.
upvoted 0 times
...
Dominga
14 days ago
I feel like option A is wrong because it denies all Telnet traffic first, which doesn't match the goal of allowing those two specific IPs.
upvoted 0 times
...
Sylvie
19 days ago
I'm not entirely sure, but I remember a practice question where we had to deny access first and then permit specific hosts. That might be relevant here.
upvoted 0 times
...
Bronwyn
24 days ago
I think the answer might be C because it allows both specific hosts and denies all others, which seems to fit the requirement.
upvoted 0 times
...

Save Cancel