Based on the ACL output, which statement is true?
- All traffic is being denied
- SSH traffic from 192.168.10.0/24 is being permitted
- Telnet traffic from 192.168.10.0/24 is being permitted
- The ACL is not applied to any interface
Explanation: According to the sources, Access Control Lists (ACLs) are processed top-down, and the first match determines the action taken on a packet.
In the examples provided in the documentation, such as in Topic 21.2.2, an extended IPv4 ACL can be configured with a permit statement to allow specific traffic types, such as Telnet (TCP port 23), from a defined source subnet to a destination.
Furthermore, the troubleshooting scenarios in Topic 21.7.6 demonstrate that while Telnet traffic might be explicitly permitted using the correct TCP protocol, SSH (port 22) is often misconfigured using UDP or is absent, causing it to be blocked by the implicit deny.
Therefore, a statement identifying that Telnet traffic is being permitted accurately reflects the typical configuration logic where an explicit permit entry exists for that service and subnet.
Related exam: CCNP ENARSI v9 Course Final Exam
