300-410 ENARSI: Implementing Cisco Enterprise Advanced Routing and ServicesDemo

By Cisco · Question Mode

QuestionQ118

Infrastructure Security

Question Image

Refer to the exhibit. While monitoring VTY access to a router, an engineer observes that the router has no filter and that anyone can access it using a username and password, even though an ACL is configured.

Which command fixes this issue?

  • A access-class INTERNET in
  • B ip access-group INTERNET in
  • C ipv6 traffic-filter INTERNET in
  • D ipv6 access-class INTERNET in
Explanation

An IPv6 ACL must be applied in VTY line configuration with ipv6 access-class INTERNET in to filter inbound remote-management connections. Defining the ACL alone does not restrict VTY access; ipv6 traffic-filter is for an interface rather than VTY lines.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!