Refer to the exhibit. Which access list configuration on router R1 will prevent traffic from the 192.168.2.0 LAN from reaching the Restricted LAN while permitting traffic from any other LAN?

Question:
Refer to the exhibit. Which access list configuration on router R1 will prevent traffic from the 192.168.2.0 LAN from reaching the Restricted LAN while permitting traffic from any other LAN?

• R1(config-std-nacl)# permit any
  R1(config-std-nacl)# deny 192.168.2.0
  R1(config)# interface G0/2
  R1(config-if)# ip access-group BLOCK_LAN2 out
• R1(config-std-nacl)# deny 192.168.2.0
  R1(config-std-nacl)# permit any
  R1(config)# interface G0/2
  R1(config-if)# ip access-group BLOCK_LAN2 out
• R1(config-std-nacl)# permit any
  R1(config-std-nacl)# deny 192.168.3.0
  R1(config)# interface G0/2
  R1(config-if)# ip access-group BLOCK-LAN2 in
• R1(config-std-nacl)# deny 192.168.3.0
  R1(config-std-nacl)# permit any
  R1(config)# interface G0/2
  R1(config-if)# ip access-group BLOCK_LAN2 in

Explanation: The correct access list syntax requires that the deny source IP address (192.168.2.0) statement come before the permit statement so that only traffic sourced from the 192.168.2.0 LAN is denied. Then the access list must be applied on interface G0/2 in the outbound direction.

Exam with this question: CCNA Cyber Ops Final Exam Answers
Exam with this question: CCNA 200-301 Certification Practice Exam Answers