H12-821: HCIP-Datacom-Core TechnologyDemo

By Huawei · Question Mode

QuestionQ11

Enterprise Application Architectures and Cloud Technologies

A router applies an advanced ACL to filter traffic. The ACL configuration is shown below. Which of the following statements about this configuration is false?

[Huawei] ad 3001  
[Huawei-ad-adv-3001] rule permit icmp source 192.168.1.3 0 destination 192.168.2.0 0.0.0.255
  • A The ACL denies ICMP packets from host 192.168.1.2 to network segment 192.168.2.0/24.
  • B The ACL permits IP packets from host 192.168.1.3 to network segment 192.168.2.0/24.
  • C The ACL is a numbered ACL whose number is 3001.
  • D The ACL permits ICMP packets from host 192.168.1.3 to host 192.168.2.200.
Explanation

The icmp protocol keyword restricts the permit rule to ICMP traffic only. Although the source host and destination subnet match, IP traffic using other protocols does not match this rule and is not permitted. Huawei documents ACLs numbered 3000 through 3999 as advanced ACLs and shows this command form for ICMP protocol matching.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!