定义一个用于封禁ICMP协议而只允许转发166.129.130.0/24子网的ICMP数据包的访问控制列表,Cisco路由器的正确配置是______。
A:access-list 198 permit icmp 166.129.130.0 255.255.255.0 any B:access-list 198 deny icmp any any C:access-1ist 198 permit ip any any D:access-list 198 permit icmp 166.129.130.0 0.0.0.255 any E:access-list 198 deny icmp any any F:access-list 198 permit ip any any G:access-list 99 permit icmp 166.129.130.0 0.0.0.255 any H:access-list 99 deny icmp any any I:access-list 99 permit ip any any J:access-list 100 permit icmp 166.129.130.0 0.0.0.255 any K:access-list 100 permit ip any any L:access-list 100 deny icmp any any
Cisco路由器执行show access-list命令显示如下一组控制列表信息
Standard IP access list 30
deny 127.0.0.0,wildcard bits 0.255.255.255
deny 172.16.0.0,wildcard bits 0.15.255.255
permit any
根据上述信息,正确的access-list配置是______。
A:Router(config)#access-list 30 deny 127.0.0.0 255.255.255.0 B:Router(config)#access-list 30 deny 172.16.0.0 255.240.0.0 C:Router(config)#access-list 30 permit any D:Router(config-std-nacl)#access-list 30 deny 127.0.0.0 0.255.255.255 E:Router(config-std-nacl)#access-list 30 deny 172.16.0.0 0.15.255.255 F:Router(config-std-nael)#access-list 30 permit any G:Router(config)#access-list 30 deny 127.0.0.0 0.255.255.255 H:Router(config)#access-list 30 deny 172.16.0.0 0.15.255.255 I:Router(config)#access-list 30 permit any J:Router(config)#access-list 30 deny 127.0.0.0 0.255.255.255 K:Router(config)#access-list 30 permit any L:Router(config)#access-list 30 deny 172.16.0.0 0.15.255.255
Cisco路由器执行show access-list命令显示如下一组控制列表信息
Standard IP access list 30
deny 127.0.0.0,wildcard bits 0.255.255.255
deny 172.16.0.0,wildcard bits 0.15.255.255
permit any
根据上述信息,正确的access-list配置是______。
A:Router(config)#access-fist 30 deny 127.0.0.0 255.255.255.0 B:Router(config)#access-list 30 deny 172.16.0.0 255.240.0.0 C:Router(config)#access-list 30 permit any D:Router(config-std-nacl)#access-list 30 deny 127.0.0.0 0.255.255.255 E:Router(config-std-nac])#ae(3ess-list 30 deny 172.16.0.0 0.15.255.255 F:Router(config-std-nael)#access-list 30 permit any G:Router(config)#access-fist 30 deny 127.0.0.0 0.255.255.255 H:Router(config)#access-list 30 deny 172.16.0.0 0.15.255.255 I:Router(config)#access-list 30 permit any J:Router(config)#access-list 30 deny 127.0.0.0 0.255.255.255 K:Router(config)#access-list 30 permit any L:Router(config)#aecess-list 30 deny 172.16.0.0 0.15.255.255
拒绝转发所有IP地址进与出方向的、端口号为1434的UDP和端口号为4444的TCP数据包,下列正确的access-list配置是()。
A:Router(config)#access-list 30 deny udp any any eq 1434 B:Router(config)#access-list 30 deny tcp any any eq 4444 C:Router(config)#access-list 30 permit ip any any D:Router(config)#access-list 130 deny udp any any eq 1434 E:Router(config)#access-list 130 deny tcp any any eq 4444 F:Router(config)#access-list 130 permit ip any any G:Router(config)#access-list 110 deny any any udp eq 1434 H:Router(config)#access-list 110 deny any any tcp eq 4444 I:Router(config)#access-list 110 permit ip any any J:Router(config)#access-list 150 deny udp ep 1434 any any K:Router(config)#access-list 150 deny tcp ep 4444 any any L:Router(config)#access-list 150 permit ip any any
在一台Cisco路由器上,只允许IP地址为212.78.4.100/24的主机和202.34.76.64/26子网上的所有主机远程登录路由器,下列正确的access-list配置是()。
A:Router(config)#access-list 30 permit 202.34.76.64 0.0.0.63 B:Router(config)#access-list 30 permit 212.78.4.100 C:Router(config)#access-list 30 deny any D:Router(config)#line vty 0 5 E:Router(config)#access-class 30 in F:Router(config)#access-list 30 permit 202.34.76.64 0.0.0.192 G:Router(config)#access-list 30 permit 212.78.4.100 H:Router(config)#access-list 30 deny any I:Router(config)#line vty 0 5 J:Router(config)#access-class 30 in K:Router(config)#access-list 30 deny any L:Router(config)#access-list 30 permit 202.34.76.64 0.0.0.63 M:Router(config)#access-list 30 permit 212.78.4.100 N:Router(config)#line vty 0 5
拒绝转发所有IP地址进与出方向的,端口为1434的UDP和端口为4444的TCP数据包,下列正确的access-list配置是______。
A:Router (config) #access-list 30 deny udp any any eq 1434 B:Router (config) #access-list 30 deny tcp any any eq 4444 C:Router (config) #access-list 30 permit ip any any D:Router (config) #access-list 130 deny udp any any eq 1434 E:Router (config) #access-list 130 deny tcp any any eq 4444 F:Router (config) #access-list 130 permit ip any any G:Router (config) #access-list 110 deny any any udp eq 1434 H:Router (config) #access-list 130 deny any any tcp eq 4444 I:Router (config) #access-list 130 permit ip any any J:Router (config) #access-list 150 deny udp eq 1434 any any K:Router (config) #access-list 150 deny tcp eq 4444 any any L:Router (config) #access-list 150 permit ip any any
定义一个用于封禁ICMP协议而只允许转发166.129.130.0/24子网的ICMP数据包的访问控制列表,Cisco路由器的正确配置是()
A:access-list 198 permit icmp 166.129.130.0 255.255.255.0 any B:access-list 198 deny icmp any any C:access-list 198 permit ip any any D:access-list 198 permit icmp 166.129.130.0 0.0.0.255 any E:access-list 198 deny icmp any any F:access-list 198 permit ip any any G:access-list 99 permit icmp 166.129.130:0 0.0.0.255 any H:access-list 99 deny icnip any any I:access-list 99 permit ip any any J:access-list 100 permit icmp 166.129.130.0 0.0.0.255 any K:access-list 100 permit ip any any L:access-list 100 deny icmp any any
在一台Cisco路由器上,只允许IP地址为212.78.4.100/24的主机和202.34.76.64/26子网上的所有主机远程登录路由器,下列正确的access-list配置是
A:Router(config)#access-list 30 permit 202.34.76.64 0.0.0.63
Router(config)#access-list 30 permit 212.78.4.100
Router(config)#access-list 30 deny any
Router(config)#line vty 0 5
Router(config-line)#access-class 30 in B:Router(config)#access-list 30 permit 202.34.76.64 0.0.0.192
Router(config)#access-list 30 permit 212.78.4.100
Router(config)#access-list 30 deny any
Router(config)#line vty 0 5
Router(config-line)#access-class 30 in C:Router(config)#access-list 30 deny any
Router(config)#access-list 30 permit 202.34.76.64 0.0.0.63
Router(config)#access-list 30 permit 212.78.4.100
Router(config)#line vty 0 5
Router(config-line)#access-class 30 in D:Router(config)#access-list 30 permit 202.34.76.64 255.255.255.192
Router(config)#access-list 30 permit 212.78.4.100
Router(config)#access-list 30 deny any
Router(config)#line vty 0 5
Router(config-line)#access-class 30 in
定义一个用于封禁ICMP协议而只允许转发166.129.130.0/24子网的ICMP数据包的访问控制列表,Cisco路由器的正确配置是
A:access-list 198 permit icmp 166.129.130.0 255.255.255.0 any access-list 198 deny icmp any any access-list 198 permit ip any any B:access-list 198 permit icmp 166.129.130.0 0.0.0.255 any access-list 198 deny icmp any any access-list 198 permit ip any any C:access-list 99 permit icmp 166.129.130:0 0.0.0.255 any access-list 99 deny icnip any any access-list 99 permit ip any any D:access-list 100 permit icmp 166.129.130.0 0.0.0.255 any access-list 100 permit ip any any access-list 100 deny icmp any any
拒绝转发所有IP地址进与出方向的、端口号为1434的UDP和端口号为4444的TCP数据包,下列正确的access-list配置是()。
A:Router (config)#access-list 30 deny udp any any eq 1434Router (config)#access-list 30 deny tcp any any eq 4444Router (config)#access-list 30 permit ip any any B:Router (config)#access-list 130 deny udp any any eq 1434Router (config)#access-list 130 deny tcp any any eq 4444Router (config)#access-list 130 permit ip any any C:Router (config)#access-list 110 deny any any udp eq 1434Router (config)#access-list 110 deny any any tcp eq 4444Router (config)#access-list 110 permit ip any any D:Router (config)#access-list 150 deny udp ep 1434 any anyRouter (config)#access-list 150 deny tcp ep 4444 any anyRouter (config)#access-list 150 permit ip any any