Refer to the exhibit.
An engineer must block all traffic from a router to its directly connected subnet 220.127.116.11/24. The engineer applies access control list EGRESS in the outbound direction on the GigabitEthernet0/0 interface of the router. However, the router can still ping hosts on the 18.104.22.168/24 subnet.
Which explanation of this behavior is true?
- A. Access control lists that are applied outbound to a router interface do not affect traffic that is sourced from the router.
- B. After an access control list is applied to an interface, that interface must be shut and no shut for the access control list to take effect.
- C. Only standard access control lists can block traffic from a source IP address.
- D. The access control list must contain an explicit deny to block traffic from the router.
More Questions: CCNP 350-401 Dumps