Implementing Cisco Network Security (IINS, legacy) — Question 52

What is the effect of the given command sequence?
crypto map mymap 20 match address 201
access-list 201 permit ip 10.10.10.0 255.255.255.0 10.100.100.0 255.255.255.0

Answer options

• A. It defines IPSec policy for traffic sourced from 10.10.10.0/24 with a destination of 10.100.100.0/24
• B. It defines IPSec policy for traffic sourced from 10.100.100.0/24 with a destination of 10.10.10.0/24
• C. It defines IKE policy for traffic sourced from 10.10.10.0/24 with a destination of 10.100.100.0/24

Correct answer: I, K, E

Explanation

The correct answer is A because the command sequence specifically matches traffic that comes from the 10.10.10.0/24 network to the 10.100.100.0/24 network, defining IPSec policy for that flow. Option B is incorrect as it reverses the source and destination addresses. Option C is also wrong because it refers to IKE policy instead of IPSec policy.