Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Implementing Cisco Enterprise Advanced Routing and Services (ENARSI) · Cisco
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
It is C: we don't know the IT member's IP address, but it is not for sure the 10.1.1.1 showing on picture, that is the interface IP address, and it is /24 subnet, meaning that the IT member would have any one of those 10.1.1.0/24 subnet IP addresses. so by changing the subnet from 0.0.0.0 to 0.0.0.255 we can cover the entire subnet rather than guessing one IP, or permitting the interface IP, which is pointless
ignore it please, but still we need it to be covering the 10.1.1.0 /24 not 10.0.0.0/24 so either we make it /8 or we change it to the specific IP of the IT member either way, changing it to /8 would cover more than we need, which is not secure, so I change my mind to A back
The correct answer appears to be A. Modify the access list to use the correct IP address. This is because the ACL's source IP is 10.0.0.0 with a wildcard mask of 0.0.0.0, which does not cover the subnet 10.1.1.x (where the IT staff might be located). Correcting the ACL to use 10.1.1.0 with an appropriate mask (like 0.0.0.255) would allow access for any host within the 10.1.1.0 subnet.