Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Implementing Cisco Enterprise Advanced Routing and Services (ENARSI) · Cisco
Select 2 answers.
This question asks for 2 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
A and C will work. With C limit the traffic to SSH only, Telnet will not be allowed. Class map ANY makes no sense as it is denying traffic that was previously permitted by ACL 100 seq 30. It is already matched in the PERMIT class and impossible to match again in the ANY class. Apparently ACL 100 seq 30 was added later as there are hits in the ANY class. ACL 100 seq 30 is for outgoing Telnet traffic which will be allowed by default class. The whole policy makes no sense at all.
SSH is TCP 22. Where is TCP 22 permitted in this image?
Options are talking about Telnet when question is asking about SSH - so confused!