300-410 ENARSI: Implementing Cisco Enterprise Advanced Routing and ServicesDemo

By Cisco · Question Mode

QuestionQ146

Infrastructure Security

Question Image

Refer to the exhibit. A network administrator must allow only HTTP and HTTPS traffic from the User1 laptop toward the Internet, in accordance with the company security policy. The administrator is still able to ping www.cisco.com. On which interface should access list 101 be applied to correct this issue?

  • A Interface G0/0 in the outgoing direction.
  • B Interface G0/0 in the incoming direction.
  • C Interface S1/0 in the outgoing direction.
  • D Interface G0/48 in the incoming direction.
Explanation

Traffic from User1 to the Internet exits the router through Serial1/0. Applying extended ACL 101 outbound on S1/0 evaluates the laptop-originated packets as they leave for the Internet, permitting only TCP ports 80 and 443 and denying all other traffic. An inbound ACL on S1/0 instead evaluates traffic arriving from the Internet, not the user-to-Internet traffic being restricted.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!