Refer to the exhibit. A router has an existing ACL that permits all traffic from the 172.16.0.0 network. The administrator attempts to add a new statement to the ACL that denies packets from host 172.16.0.1 and receives the error message that is shown in the exhibit. What action can the administrator take to block packets from host 172.16.0.1 while still permitting all other traffic from the 172.16.0.0 network?

Refer to the exhibit. A router has an existing ACL that permits all traffic from the 172.16.0.0 network. The administrator attempts to add a new statement to the ACL that denies packets from host 172.16.0.1 and receives the error message that is shown in the exhibit. What action can the administrator take to block packets from host 172.16.0.1 while still permitting all other traffic from the 172.16.0.0 network?

• Create a second access list denying the host and apply it to the same interface.
• Add a deny any any statement to access-list 1.
• Manually add the new deny statement with a sequence number of 15.
• Manually add the new deny statement with a sequence number of 5.

Explanation: Because the new deny statement is a host address that falls within the existing 172.16.0.0 network that is permitted, the router rejects the command and displays an error message. For the new deny statement to take effect, it must be manually configured by the administrator with a sequence number that is less than 10.

Related exam: Network Defense - Checkpoint Exam: Firewalls, Cryptography, and Cloud Security Answers
Related exam: Cybersecurity Essentials - Checkpoint Exam: Firewalls, Cryptography, and Cloud Security (Module 14 – 18 Exam)