NETWORK SECURITY
FIREWALLS
|
Question
[CLICK ON ANY CHOICE TO KNOW THE RIGHT ANSWER]
|
Your Cisco router has three network interfaces configured:* S0/1/0 is a WAN interface that is connected to an ISP.* F0/0 is connected to an Ethernet LAN segment with a network address of 192.168.1.0/24.* F0/1 is connected to an Ethernet LAN segment with a network address of 192.168.2.0/24.You have configured an access control list on this router using the following rules:* deny ip 192.168.1.0 0.0.0.255 any* deny ip 192.168.2.0 0.0.0.255 anyThese rules will be applied to the WAN interface on the router. Your goal is to block any IP traffic coming in on the WAN interface that has a spoofed source address that makes it appear to be coming from the two internal networks.However, when you enable the ACL, you find that no traffic is being allowed through the WAN interface. What should you do?
|
|
Add a permit statement to the bottom of the access list.
|
|
|
Apply the access list to the Fa0/0 interface instead of the S0/1/0 interface.
|
|
|
Apply the access list to the Fa0/1 interface instead of the S0/1/0 interface.
|
|
|
Use the out parameter instead of the in parameter within each ACL rule.
|
Explanation:
There is 1 question to complete.