Refer to the following command output, which details an ACL enabled on port G0/0 for the inbound direction. Which answers list a configuration mode and command that would result in the deletion of the line that matches subnet 172.16.1.0/24? (Choose two answers.)
show ip access-lists dikta-list Standard IP access list dikta-list 10 permit 172.16.1.0, wildcard bits 0.0.0.255 20 permit 172.16.2.0, wildcard bits 0.0.0.255 30 permit 172.16.3.0, wildcard bits 0.0.0.255
- In global config mode: no 10
- In interface G0/0 config mode: no 10
- In ACL dikta-list config mode: no 10
- In ACL dikta-list config mode: no permit 172.16.1.0 0.0.0.255
- In global config mode: no permit 172.16.1.0 0.0.0.255
Explanation: In the command output, line number 10 references a permit command that matches addresses in subnet 172.16.1.0/24. The question stem identifies the subnet, so it indirectly asks about line 10 of the ACL. Any specific Access Control Entry (ACE) in ACL can be deleted in ACL config mode. Two methods can be used: the short no line-number, where line-number is the ACE’s line number, or by issuing a no version of the permit or deny command, as shown in one of the correct answers. The three incorrect answers show correct commands but incorrect modes in which to use the commands.
Please login or Register to submit your answer