Implementing Cisco IP Routing (CCNP ROUTE, legacy) — Question 326
Which configuration is applied to a device so that it blocks outbound web traffic on Saturdays and Sundays between the hours of 1:00 AM and 11:59 PM?
Answer options
- A. time-range SATSUN absolute Saturday Sunday 1:00 to 23:59 access-list 102 deny tcp any any eq 80 time-range SATSUN access-list 102 deny tcp any any eq 443 time-range SATSUN interface Vlan303 ip address 10.9.5.3 255.255.255.0 ip access-group 102 in
- B. time-range SATSUN periodic Saturday Sunday 1:00 to 23:59 access-list 102 deny tcp any any eq 80 time-range SATSUN access-list 102 deny tcp any any eq 443 time-range SATSUN interface VLAN303 ip address 10.9.5.3 255.255.255.0 ip access-group 102 in
- C. time-range SATSUN periodic Saturday Sunday 1:00 to 11:59 access-list 102 deny tcp any any eq 80 time-range SATSUN access-list 102 deny tcp any any eq 443 time-range SATSUN interface Vlan303 ip address 10.9.5.3 255.255.255.0 ip access-group 102 in
- D. time-range SATSUN periodic Saturday Sunday 1:00 to 23:59 access-list 102 deny udp any any eq 80 time-range SATSUN access-list 102 deny tcp any any eq 443 time-range SATSUN interface Vlan303 ip address 10.9.5.3 255.255.255.0 ip access-group 102 out
Correct answer: B
Explanation
Option B is correct because it uses the 'periodic' keyword for the time-range, which is appropriate for recurring schedules like weekends. Option A incorrectly uses 'absolute', which does not apply for weekly recurring schedules, and Option C limits the time incorrectly by specifying 11:59 instead of 23:59. Option D incorrectly denies UDP traffic instead of TCP for web traffic.