An ACL is applied inbound on a router interface. The ACL consists of a single entry: access-list 101 permit tcp 10.1.1.0 0.0.0.255 host 10.1.3.8 eq dns . If a packet with a source address of 10.1.3.8, a destination address of 10.10.3.8, and a protocol of 53 is received on the interface, is the packet permitted or denied?
- denied
- permitted
Explanation: The packet is denied because it fails to match the specific criteria of the single permit entry in the ACL:
- Source Address Mismatch: The ACL permits traffic from the source range 10.1.1.0 to 10.1.1.255. The packet's source address, 10.1.3.8, falls outside this permitted range.
- Destination Address Mismatch: The ACL permits traffic destined for the specific host 10.1.3.8. The packet's destination address is 10.10.3.8, which does not match.
- Implicit Deny: Because the packet does not match the explicit permit statement, it is discarded by the implicit deny any statement that is automatically applied to the end of every ACL.
Related exam: CCNA 3 v7 Course Final Exam Answers
