Which will fix the issue and allow ONLY ping to work while keeping telnet disabled?

An administrator is trying to ping and telnet from SwitchC to RouterC with the results shown below.

Switch>

Switch> ping 10.4.4.3

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.4.4.3, timeout is 2 seconds:

.U.U.U

Success rate is 0 percent (0/5)

Switch>

Switch> telnet 10.4.4.3

Trying 10.4.4.3 …

% Destination unreachable; gateway or host down

Switch>

Click the console connected to RouterC and issue the appropriate commands to answer the questions.

Which will fix the issue and allow ONLY ping to work while keeping telnet disabled?
A . Correctly assign an IP address to interface fa0/1.
B . Change the ip access-group command on fa0/0 from “in” to “out”.
C . Remove access-group 106 in from interface fa0/0 and add access-group 115 in.
D . Remove access-group 102 out from interface s0/0/0 and add access-group 114 in
E . Remove access-group 106 in from interface fa0/0 and add access-group 104 in.

View Answer

Answer: E

Explanation:

Let’s have a look at the access list 104:

The question does not ask about ftp traffic so we don’t care about the two first lines. The 3rd line denies all telnet traffic and the 4th line allows icmp traffic to be sent (ping). Remember that the access list 104 is applied on the inbound direction so the 5th line “access-list 104 deny icmp any echo-reply” will not affect our icmp traffic because the “echo-reply” message will be sent over the outbound direction.