Question:
Which statement correctly describes how an ACL can be used with the access-class command to filter vty access to a router?
- An extended ACL can be used to restrict vty access based on specific source addresses and protocol but the destination can only specify the keyword any .
- It is only possible to apply a standard ACL to the vty lines.
- An extended ACL can be used to restrict vty access based on specific source addresses, destination addresses, and protocol.
- An extended ACL can be used to restrict vty access based on specific source and destination addresses but not on protocol.
Explanation: By design, the access-class command only matches the source IP address. Therefore, if an extended access list is used, the any parameter must be used as the destination IP address or the configuration will not work.
Exam with this question: CCNP Enterprise: Advanced Routing (Version 8.0) – Infrastructure Security and Management Exam
Exam with this question: CCNA Security Chapter 4 Exam (CCNAS v1.2)
Please login or Register to submit your answer