You have configured a Classifier Access Control List(CLACL)with multiple match clauses.Each match clause has multiple defined fields within it.Which two statements describe how the router evaluates this CLACL?（）A.All fields in each match clause must match

题目

You have configured a Classifier Access Control List(CLACL)with multiple match clauses.Each match clause has multiple defined fields within it.Which two statements describe how the router evaluates this CLACL?（）

A.All fields in each match clause must match.

B.All match clauses in the CLACL must match.

C.Only asingle field in each match clause must match.

D.Only asingle match clause in the CLACL must match

相似考题

1.Where ________ you ________?A.are/beB.have/beC.is/beD.have/been

2.访问控制表是防火墙实现安全管理的重要手段。完成下列访问控制列表(access-control-list)的配置内容，使内部所有主机不能访问外部IP地址段为202.117.12.0/24Web服务器。Firewall(config)access-list 100 deny tcp (11) 202.197.12.0 255.255.255.0 eq (12)(11)

3.A network administrator is configuring ACLs on a cisco router,to allow traffic from hosts on networks 192.168.146.0,192.168.147.0,192.168.148.0and192.168.149.0 only.Which two ACL statements when combined are the best for accomplishing the task?（）A. access-list 10 permit ip 192.168.147.0 0.0.0.255.255B. access-list 10 permit ip 192.168.149.0 0.0.0.255.255C. access-list 10 permit ip 192.168.146.0 0.0.0.0.255D. access-list 10 permit ip 192.168.146.0 0.0.0.1.255E. access-list 10 permit ip 192.168.148.0 0.0.0.1.255F. access-list 10 permit ip 192.168.146.0 255.255.255.0

4.封禁ICMP协议，只转发212.78.170.166/27所在子网的所有站点的ICMP数据包，正确的access-list配置是______。A) Router(config)#access-list 110 permit icmp 212.78.170.166 0.0.0.0 anyRouter(config)#access-list 110 deny icmp any anyRouter(config)#access-list 110 permit ip any anyB) Router(config)#access-list 110 permit icmp 212.78.170.0 255.255.255.224 anyRouter(config)#access-list 110 permit ip any anyRouter(config)#access-list 110 deny icmp any anyC) Router(config)#access-list 110 perimt iemp 212.78.170.0 0.0.0.255 anyRouter(config)#access-list 110 deny icmp any anyRouter(config)#access-list 110 permit ip any anyD) Router(config)#access-list 110 permit icmp 212.78.170.160 0.0.0.31 anyRouter(config)#access-list 110 deny icmp any anyRouter(config)#access-list 110 permit ip any anyA．B．C．D．

参考答案和解析
参考答案：A, D
更多“You have configured a Classifier Access Control List(CLACL)with multiple match clauses.Eac ”相关问题

  • 第1题：

    A network administrator is configuring ACLs on a cisco router, to allow affic from hosts on networks 192.168.146.0,192.168.147.0,192.168.148.0 and 192.168.149.0 only.Which two ACL statements when combined are the best for accomplishing the task?（）

    A.access-list 10 permit ip 192.168.147.0 0.0.0.255.255

    B.access-list 10 permit ip 192.168.149.0 0.0.0.255.255

    C.access-list 10 permit ip 192.168.146.0 0.0.0.0.255

    D.access-list 10 permit ip 192.168.146.0 0.0.1.255

    E.access-list 10 permit ip 192.168.148.0 0.0.1.255

    F.access-list 10 permit ip 192.168.146.0 255.255.255.0


    参考答案：D, E

  • 第2题：

    An access list was written with the four statements shown in the graphic.Which single access list statement will combine all four of these statements into a single statement that will have exactly the same effect？（）

    A.access-list10 permit 172.29.16.00.0.0.255

    B.access-list10 permit 172.29.16.00.0.1.255

    C.access-list10 permit 172.29.16.00.0.3.255

    D.access-list10 permit 172.29.16.00.0.15.255

    E.access-list10 permit 172.29.0.00.0.255.255


    参考答案：C

  • 第3题：

    用标准访问控制列表禁止非法地址192.168.0.0/16的数据包进出路由器的正确配置是______。

    A．access-list 110 deny 192.168.0.0 0.0.255.255 access-list 110 permit any

    B．access-list 10 deny 192.168.0.0 255.255.0.0 access-list 10 permit any

    C．access-list 50 permit any access-list 50 deny 192.168.0.0 0.0.255.255

    D．access-list 99 deny 192.168.0.0 0.0.255.255 access-list 99 permit any


    正确答案：D
    解析：访问控制列表(ACL)的表号(Name)和名字(Number)都是用来标识或引用访问控制列表的。名字用字符串标识，表号用数字表示。标准ACL的表号范围是1～99、1300～1999；扩展ACL的表号范围是100～199、2000～2699。因此，选项A中ACL表号(110)不能满足题意要求。
      在路由器全局配置模式下，使用命令access-list access-1ist-number {permit | deny) source wildcard-mask配置标准ACL。其中，访问控制列表通配符(Wildcard-Mask)是子网掩码的反码。本试题中，地址块“192.168.0.0/16”的“/16”是子网掩码255.255.0.0的简化表达形式，其对应的ACL通配符为0.0.255.255。因此选项B的配置语句不符合该命令的语法格式。
      ACL默认执行顺序是自上而下的。在配置ACL列表时，要遵循最小特权原则、最靠近受控对象原则，以及默认丢弃原则。其中，最小特权原则是指只给受控对象完成任务所必需的最小的权限，即被控制的总规则是各个规则的交集，只满足部分条件的是不容许通过规则的；最靠近受控对象原则是对所有的网络层访问权限进行控制，也就是说在检查规则时是采用自上而下在ACL中一条条检测的，只要发现符合条件就立刻转发，而不继续检测下面的ACL语句；默认丢弃原则是指在路由交换设备中，默认最后一条ACL语句为deny any any，即丢弃所有不符合条件的数据包。
      对于选项C，将“access-list 50 permit any”置于ACL规则的最前面，表示允许所有的数据包进出路由器，则其后的deny语句将不起作用，即不能按照预期的应用需求正确地控制数据包的接收与拒绝。
      因此，在Cisco路由器上，用标准访问控制列表禁止非法地址192.168.0.0/16的数据包进出路由器，可能的一种配置语句，如下所示：
      Router (conflg)# access-list 99 deny 192.168.0.0 0.0.255.255
      Router (conflg)# access-list 99 permit any

  • 第4题：

    A network administrator wants to add a line to an access list that will block only Telnet access by the hosts on subnet 192.168.1.128/28 to the server at 192.168.1.5. What command should be issued to accomplish this task?（）

    A.access-list 101 deny tcp 192.168.1.128 0.0.0.15 192.168.1.5 0.0.0.0 eq 23 access-list 101 permit ip any any

    B.access-list 101 deny tcp 192.168.1.128 0.0.0.240 192.168.1.5 0.0.0.0 eq 23 access-list 101 permit ip any any

    C.access-list 1 deny tcp 192.168.1.128 0.0.0.255 192.168.1.5 0.0.0.0 eq 21 access-list 1 permit ip any any

    D.access-list 1 deny tcp 192.168.1.128 0.0.0.15 host 192.168.1.5 eq 23 access-list 1 permit ip any any


    参考答案：A

  • 第5题：

    Which single access list statement will combine all four of these statements into a single statement that will have exactly the same effect()。

    A.access-list 10 permit 172.29.16.0 0.0.0.255

    B.access-list 10 permit 172.29.16.0 0.0.1.255

    C.access-list 10 permit 172.29.16.0 0.0.3.255

    D.access-list 10 permit 172.29.16.0 0.0.15.255

    E.access-list 10 permit 172.29.0.0 0.0.255.255


    参考答案：C

  • 第6题：

    You look（） What（）you（）?

    Atire；did；do

    Btiring；have；done

    Ctired；do；do

    Dtired；have；been doing


    D
    略

相关内容