ExamQuestions.com

Register
Login
CCIE Security Written Exam (400-251) Exam Questions

Cisco

CCIE Security Written Exam (400-251)

309 / 530

Question 309:

Using Cisco IOS, which two object-group options will permit networks 10.1.1.0/24 and 10.1.2.0/24 to host 192.168.5.1 port 80 and 443? (Choose 2.) 

Answer options:

A. object-group network SOURCE range 10.1.1.0 10.1.2.255 object-group network DESTINATION host 192.168.5.1 object-group service HTTP tcp eq www tcp eq 443 tcp source gt 1024 ! access-list 101 permit object-group HTTP object-group SOURCE object-group DESTINATION
B. object-group network SOURCE 10.1.1.0 0.0.0.255 10.1.2.0 0.0.0.255 object-group network DESTINATION host 192.168.5.1 object-group service HTTP tcp eq www tcp eq 443 ! ip access-list extended ACL-NEW permit object-group SOURCE object-group DESTINATION object-group HTTP
C. object-group network SOURCE 10.1.1.0 255.255.255.0 10.1.2.0 255.255.255.0 object-group network DESTINATION host 192.168.5.1 object-group service HTTP tcp eq www tcp eq 443 ! ip access-list extended ACL-NEW permit object-group SOURCE object-group DESTINATION object-group HTTP
D. object-group network SOURCE 10.1.1.0 255.255.255.0 10.1.2.0 255.255.255.0 object-group network DESTINATION host 192.168.5.1 object-group service HTTP tcp eq www tcp eq 443 tcp source gt 1024 ! ip access-list extended ACL-NEW