350-401 Question 285

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  The key is the access list number as it is extended access list and word established

• 2

  Correct is C. The purpose of using the established keyword is to allow the return traffic of an established connection, while denying any new connection attempts. This can be useful in scenarios where you want to allow responses from outbound connections initiated from within your network while still maintaining security by not allowing new inbound connections on that port. With the given ACL rule in the answer options, it is clear that we are talking about FTP Server which uses port 21. If a client from inside the network initiates an FTP connection to an external FTP server (which typically uses port 21 for control), the firewall would allow the returning control traffic from the FTP server due to the established keyword.

• 4

  extended access lists allow ports whereas standards dont