Valid 350-501 Dumps shared by ExamDiscuss.com for Helping Passing 350-501 Exam! ExamDiscuss.com now offer the newest 350-501 exam dumps, the ExamDiscuss.com 350-501 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com 350-501 dumps with Test Engine here:
Refer to the exhibit. To protect in-band management access to CPE-R7, an engineer wants to allow only SSH management and provisioning traffic from management network 192.168.0.0/16. Which infrastructure ACL change must be applied to router PE-R9 to complete this task?
Correct Answer: A
To achieve this, we need to apply an access control list (ACL) on PE-R9 that permits SSH traffic from the management network 192.168.0.0/16 while denying other traffic. The correct ACL configuration is as follows: access-list 100 permit tcp 192.168.0.0 0.0.255.255 any eq 22 access-list 100 deny ip any any The first line permits TCP traffic from the management network to any destination with destination port 22 (SSH). The second line denies all other IP traffic. Reference: Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) v1.0 course materials. Cisco Learning Network: SPCOR Training Videos Cisco Learning Network: Service Provider Training