Which statement correctly describes how an ACL can be used with the access-class command to filter vty access to a router?

Last Updated: Oct 8, 2022
IT Exam Items Repository › Category: CCNA Security v1.2 › Which statement correctly describes how an ACL can be used with the access-class command to filter vty access to a router?

Question:

Which statement correctly describes how an ACL can be used with the access-class command to filter vty access to a router?

  • An extended ACL can be used to restrict vty access based on specific source addresses and protocol but the destination can only specify the keyword any .
  • It is only possible to apply a standard ACL to the vty lines.
  • An extended ACL can be used to restrict vty access based on specific source addresses, destination addresses, and protocol.
  • An extended ACL can be used to restrict vty access based on specific source and destination addresses but not on protocol.

Explanation: By design, the access-class command only matches the source IP address. Therefore, if an extended access list is used, the any parameter must be used as the destination IP address or the configuration will not work.

Related exam: CCNP ENARSI 8 Modules 21 - 23 Checkpoint Exam: Infrastructure Security and Management Exam
Related exam: CCNA Security Chapter 4 Exam (CCNAS v1.2)

About The Author

ITExamAnswers Editorial Team

The ITExamAnswers Editorial Team is a dedicated group of certified IT professionals and network engineers. We rigorously review, verify, and update all exam materials to ensure you receive the most accurate and reliable resources for your certification journey.