Which outbound access list, applied to the WAN interface of a router, permits all traffic except for http traffic sourced from the workstation with IP address 10.10.10.1?

Which outbound access list, applied to the WAN interface of a router, permits all traffic except for http traffic sourced from the workstation with IP address 10.10.10.1?

A. ip access-list extended 100

deny tcp host 10.10.10.1 any eq 80

permit ip any any

B. ip access-list extended 200

deny tcp host 10.10.10.1 eq 80 any

permit ip any any

C. ip access-list extended NO_HTTP

deny tcp host 10.10.10.1 any eq 80

D. ip access-list extended 10

deny tcp host 10.10.10.1 any eq 80

permit ip any any

View Answer

Answer: A

Explanation:

The correct answer is Option A. This option specifies an access list that denies HTTP traffic from the host with the IP address 10.10.10.1 while permitting all other traffic. This is achieved by denying TCP traffic on port 80, which is the default port for HTTP, from the specified host and allowing all other IP traffic.

References: = Implementing and Operating Cisco Service Provider Network Core Technologies