300-410 ENARSI: Implementing Cisco Enterprise Advanced Routing and ServicesDemo

By Cisco · Question Mode

QuestionQ259

Infrastructure Security

Question Image

Refer to the exhibit. A network engineer received a call from the vendor about a failed attempt to remotely log in to their managed router loopback interface from 192.168.40.15. Which action must the network engineer take to resolve the issue?

  • A The source IP summarization must be updated to include the vendor source IP address.
  • B The time-range configuration must be changed to use absolute instead of periodic.
  • C The EIGRP configuration must be updated to include a network statement for loopback 100.
  • D The IP access list VENDOR must be applied to interface loopback 100.
Explanation

The VENDOR ACL permits SSH to 10.199.100.1 only from 192.168.32.0 0.0.7.255, which spans 192.168.32.0 through 192.168.39.255. Source 192.168.40.15 is outside that range and is denied by the ACL’s implicit deny, so the permitted source summary must be updated to include it.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!