Refer to the exhibit. Corporate policy demands that access to the server network be restricted to internal employees only. What is the best ACL type and placement to use in this situation?
- extended ACL outbound on R2 S0/0/1
- standard ACL outbound on R2 S0/0/0
- standard ACL inbound on R2 WAN interface connecting to the internet
- extended ACL inbound on R2 S0/0/0
Explanation:
ACL Type: An extended ACL is the best choice because it allows for filtering based on both the source address (identifying internal employees versus internet users) and the destination address (the specific server network).
Placement: According to the sources, outbound ACLs are most effective when a single filter must be applied to traffic arriving from multiple inbound interfaces. In this topology, traffic destined for the server network enters R2 through two different points: the internet WAN interface and the R1 serial interface (S0/0/0). Placing the ACL outbound on R2 S0/0/1 ensures that all traffic from both sources is filtered at this single "choke point" before it is sent to R3 and the server network.
Related exam: Switching, Routing, and Wireless Essentials (Version 7.00) - SRWE Final Exam
