QuestionQ353

Infrastructure Security

Refer to the exhibit.

Question Image

An engineer is troubleshooting contractors’ failed Telnet or HTTP access to the business application server during the weekend.

Which configuration resolves the issue?

  • A R1 no access-list 101 permit tcp 10.3.3.0 0.0.0.255 host 10.1.1.3 eq telnet time-range Contractor
  • B R1 time-range Contractor no periodic weekdays 8:00 to 16:30 periodic daily 8:00 to 16:30
  • C R4 time-range Contractor no periodic weekdays 17:00 to 23:59 periodic daily 8:00 to 16:30
  • D R4 no access-list 101 permit tcp 10.3.3.0 0.0.0.255 host 10.1.1.3 eq telnet time-range Contractor
Explanation

The outbound ACL on R1 permits the contractor subnet 10.3.3.0/24 to reach 10.1.1.3 by both Telnet and HTTP only while the Contractor time range is active. The configured periodic weekdays 8:00 to 16:30 excludes Saturday and Sunday, so both entries are inactive. Replacing it with periodic daily 8:00 to 16:30 includes weekends and activates both permits. Cisco documents that daily covers Monday through Sunday and that multiple periodic time-range statements can be used for ACL time ranges.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!