300-410 ENARSI: Implementing Cisco Enterprise Advanced Routing and ServicesDemo

By Cisco · Question Mode

QuestionQ564

Infrastructure Security

Question Image

Refer to the exhibit. A network administrator sees these console messages from host 10.11.110.12, originating from interface E1/0. The administrator considers this an unauthorized attempt to access SNMP on R1. Which action prevents the attempts from reaching R1 E1/0?

  • A Configure IOS control plane protection using ACL 90 on interface E1/0.
  • B Create an inbound ACL on interface E1/0 to deny SNMP from host 10.11.110.12.
  • C Add a permit statement including the host 10.11.110.12 into ACL 90.
  • D Configure IOS management plane protection using ACL 90 on interface E1/0.
Explanation

An inbound ACL on E1/0 can deny SNMP traffic from 10.11.110.12, causing the router to discard the packets as they enter the interface, before SNMP authentication is processed. ACL 90 limits which managers may use the configured SNMP community, but that check occurs after the request reaches the device.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!