You are creating an extended IPv4 access list to stop hosts in the 192.168.5.0/24 subnet from reaching the 172.16.10.0/24 subnet. A separate permit ip any any line will follow so that all other IP traffic is allowed. Which single ACL entry should you use to perform the required deny action?
access-list 100 deny ip any 172.16.10.0 0.0.0.255
access-list 100 deny ip 192.168.5.0 0.0.0.255 172.16.10.0 0.0.0.255
Because you must filter on both source and destination subnets, an extended ACL entry is required. The statement "access-list 100 deny ip 192.168.5.0 0.0.0.255 172.16.10.0 0.0.0.255" matches any IP packet whose source falls within 192.168.5.0/24 and whose destination falls within 172.16.10.0/24, then blocks it. Extended ACL numbers 100-199 (and 2000-2699) are reserved for IPv4, so 100 is valid. After this deny, you would add "access-list 100 permit ip any any" to allow the rest of the traffic; that permit line is not shown because the question asks only for the deny entry. The other options are incorrect because they either use a standard ACL (which cannot specify a destination), omit the source network, or have invalid syntax.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the difference between standard and extended ACLs?
Open an interactive chat with Bash
What does the 0.0.0.255 mean in ACL commands?
Open an interactive chat with Bash
Why must the ACL use the number 100 in this case?
Open an interactive chat with Bash
Cisco CCNA 200-301
Security Fundamentals
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .