Cisco Certified Network Associate (CCNA) Practice Exam

Disable ads (and more) with a membership for a one time $2.99 payment

Question: 1 / 50

Which access-list command line would allow a specific host to access a specific private IP address?

(config)#access-list ACL NUMBER permit host PRIVATE IP ADDRESS

The correct access-list command line that would allow a specific host to access a specific private IP address is indeed the first option. The use of the "permit" command specifically indicates that traffic from the particular host will be allowed to reach the designated private IP address. This command structure effectively creates a rule within an access control list (ACL) that permits communication between the specific sender, identified as "host," and the specified private IP address. It helps manage traffic flow and enhances security by ensuring that only authorized devices can interact with certain addresses within the private network. The other command options serve different functions. For instance, denying access with the second choice would block the host from reaching the specified IP address, which is counterproductive if the goal is to allow access. The third option pertains to Network Address Translation (NAT) configuration, specifically mapping inside source addresses to an external interface, and does not directly control access to a private address. Lastly, the fourth option is also related to NAT, focusing on marking the outside interfaces rather than addressing ACL rules.

(config)#access-list ACL NUMBER deny host PRIVATE IP ADDRESS

(config)#ip nat inside source list ACCESS LIST NUMBER

(config)#ip nat outside

Next

Report this question