Comments on: CCNA – Access List Questions 2

By: Anonymous

Anonymous — Thu, 19 Dec 2013 15:56:05 +0000

Can anyone please give me the latest dumps for 200 -120? It would be greatly appreciated.

thanks

By: Anonymous

Anonymous — Sun, 29 Sep 2013 19:06:20 +0000

to be honest I am having a hard time understanding a lot of material that is being covered on the 640-802 exam I need HELP!

By: Anonymous

Anonymous — Sun, 29 Sep 2013 19:03:53 +0000

i am having a hard time understanding when to deny or permit ACLs can someone please explain it to me? Also what are dumps and how effective are they?

By: Atif Abdul Rashid

Atif Abdul Rashid — Sat, 28 Sep 2013 09:26:40 +0000

Tomorrow I am having Exam any update Dumps please let me know m_atif85@hotmail.com

By: windows

windows — Mon, 23 Sep 2013 07:53:41 +0000

Taking ccna 640-802 can someone please e-mail me a dump.xmathonsi@gmail.com

By: Shubham

Shubham — Mon, 23 Sep 2013 06:10:48 +0000

Booked 640-802 For 30th of this month.. plz mail me valid Dumps on shubham54@in.com

By: CiscoER

CiscoER — Mon, 23 Sep 2013 01:57:37 +0000

@ Tosin – you can have a server in a network environment without a router – using just switches as long as the hosts on same network so therefore you wouldn’t need ACL. The server still vulnerable to attack – from inside the network – Rules out A.

By: Tosin

Tosin — Sat, 21 Sep 2013 22:49:59 +0000

Question 10

In which solution is a router ACL used?

A. protecting a server from unauthorized access
B. controlling path selection, based on the route metric
C. reducing router CPU utilization
D. filtering packets that are passing through a router

with due respect…i think the answer is A.

option D is a function of firewall.

Pls share your opinions

By: cisco

cisco — Fri, 20 Sep 2013 05:48:25 +0000

@Richard
hahaha…i raised the questn…bcz of some misundstanding,,,then suddenly i though and i commented..i love u i love u hhaa…thanks buddy :)

By: Sahud

Sahud — Thu, 19 Sep 2013 04:05:05 +0000

Question no.4
answer: A F

By: TM

TM — Wed, 18 Sep 2013 20:58:31 +0000

Same as above taking CCNA 640-802 on Satuday lastest dump would be appriciated terrizmo@hotmail.com

By: Anonymous

Anonymous — Wed, 18 Sep 2013 19:44:43 +0000

Taking CCNA 640-802 test next Wednesday, can someone send dump at tgrass80@gmail.com

By: Anonymous

Anonymous — Wed, 18 Sep 2013 19:44:06 +0000

Taking CCNA test next Wednesday, can someone send dump at tgrass80@gmail.com

By: ansari

ansari — Wed, 18 Sep 2013 09:28:15 +0000

Can anyone please give me the latest dumps for 640-802? It would be greatly appreciated. and very thanks full
emil id:akhtaransari555@yahoo.com

By: pk

pk — Wed, 18 Sep 2013 06:51:14 +0000

Thanks Joe. It is clear now A & F

By: Kevin Daniels from Seattle

Kevin Daniels from Seattle — Wed, 18 Sep 2013 00:10:26 +0000

Can anyone please give me the latest dumps for 640-802? It would be greatly appreciated.

amirakclubs@gmail.com

thanks

By: Joe

Joe — Fri, 13 Sep 2013 15:44:57 +0000

Franz/Anon, try a google…. https://supportforums.cisco.com/thread/2187794

By: Franz

Franz — Fri, 13 Sep 2013 06:38:02 +0000

Which two statements apply to dynamic access lists? (choose two)

A. they offer simpler management in large internetworks.
B. you can control logging messages.
C. they allow packets to be filtered based on upper-layer session information.
D. you can set a time-based security policy.
E. they provide a level of security against spoofing.
F. they are used to authenticate individual users.

*** THE ACME 486 DUMP SAYS THAT D & F ARE THE ANSWERS … CAN SOMEONE EXPLAIN TO ME WHATS GOING ON ?? ***

By: Anonymous

Anonymous — Fri, 13 Sep 2013 06:37:43 +0000

Which two statements apply to dynamic access lists? (choose two)

*** THE ACME 486 DUMP SAYS THAT D & F ARE THE ANSWERS … CAN SOMEONE EXPLAIN TO ME WHATS GOING ON ?? ***

Reposted… Please explain sir 9tut. Thank you.

By: inayat shah

inayat shah — Fri, 13 Sep 2013 05:25:46 +0000

I am going to sit my CCNA exam on 28 Sep. Could anybody send me the latest Sim or all the Sim at 9tut is still enough for CCNA 640-802 exam? please do inform and support me. Thank you.

E-mail: inayat291@gmail.com
best regard!

By: jasostrong

jasostrong — Wed, 11 Sep 2013 13:28:59 +0000

Thanks 9tut. I made it. I passed my CCNA 200-120 today. The sim is Access-list 1 , Access-list 2 & EIGRP. A lot of new questions like Netflow, Syslog, SNMP, VRRP, and GLBP.

By: Richard

Richard — Wed, 11 Sep 2013 05:08:49 +0000

tani 10,
pls. make sure your read about ACL, particularly, time-based and dynamic
:)

By: ad

ad — Tue, 10 Sep 2013 19:17:51 +0000

9tut…i love u :)…

By: ad

ad — Tue, 10 Sep 2013 19:17:39 +0000

9tut…i love u :)..

By: ad

ad — Tue, 10 Sep 2013 19:17:24 +0000

9tut…i love u :).

By: ad

ad — Tue, 10 Sep 2013 19:16:54 +0000

9tut…i love u :)

By: ad

ad — Tue, 10 Sep 2013 19:16:26 +0000

9tut…i love u :)

By: ad

ad — Tue, 10 Sep 2013 19:13:35 +0000

q no 1…. ans should be A..its match…..

By: tani10

tani10 — Tue, 10 Sep 2013 16:20:26 +0000

Question 4

correct answers

A, D

By: ian_arvin from the philippines

ian_arvin from the philippines — Tue, 10 Sep 2013 15:18:13 +0000

Hi guys for those who have passed ccna 640-802 which dump is more reliable the one from spike or acme? If u have new dumps kindly send to cacsalanga@yahoo.com

By: Unknown

Unknown — Mon, 09 Sep 2013 23:22:32 +0000

Phat March 30th, 2013 hi everyone, at last, in q4, which are the correct answer: A&F or D&F?

By: anonymous

anonymous — Fri, 06 Sep 2013 18:36:33 +0000

q 10 in today exman !!

By: Shuja

Shuja — Fri, 06 Sep 2013 13:51:05 +0000

I have the exam on 10th, can anyone send me the latest dumps please, shujaansari@outlook.com

By: Ali

Ali — Tue, 03 Sep 2013 07:59:26 +0000

Guys please send me latest dumps ccna640-802 as i am taking the exam on mid of september 13 can u please send me latest dumps. My email address is atpl21@yahoo.com.
Thanks

By: Adeel

Adeel — Mon, 26 Aug 2013 15:16:50 +0000

Hello Guys I hope you will be fine there. I have CCNA (640-802) and CCNA security (640-554) Vouchers on special discount of 58% for World wide, with six months expiry date till you purchase. Each voucher cost 70USD.
Details Required For CCNA Voucher For Discount Processing:
1-Full Name. 1st Name & Last Name (as you want to appear on certificate & documents)
2-Country.
3-City.
4-State.
5-Pin Code (or Area Code)
6-Residential Address (or where you can collect your Certificate or further correspondence
can be received)
7-Date of birth
Add me on Skype through this information which is written below:
Skype Name: rockon660
you can also email me at this email address which is written below:
madeelqaiser@gmail.com
If you have any Questions feel free to contact me.
Thanks,
Best regards,
Adeel

By: Question 9

Question 9 — Wed, 21 Aug 2013 19:23:58 +0000

9tut, for Q2, When host connects to ssh and telnet port to the server, it uses randomly generated ports. In order for server to respond to the request, how ACL works with this? If port is specified as service name ‘telnet’, does router identifies automatically the packet is for returning telnet request??? If not, shouldn’t all outgoing ports have to be open for LAN with servers?

By: Question 9

Question 9 — Wed, 21 Aug 2013 19:14:39 +0000

9tut, for Q3, are you sure the answer of Q3 is correct answer in CCNA exam???
Extended ACL is usually put close to source in book, but if you put there, how will you block internet access for HTTPS from student 01 to internet unless you can not specify serial port of Router 1 to internet? Or does this question just ask us to assume there is no HTTPS server inside LAN?

Unless anyone got 1000 score in CCNA exam and marked B C D, I don’t see it’s correct answer for this question

By: James

James — Thu, 15 Aug 2013 20:10:03 +0000

I am sorta annoyed at the way you normally place the ACL on the inbound direction (as per Q3) but for the ACL Lab its on the outbound direction. Yuk.

By: isabel marant sneakers

isabel marant sneakers — Wed, 14 Aug 2013 07:28:05 +0000

I got this site from my pal who shared with me regarding this site and now this time I am visiting this website and reading very informative articles or reviews here.
isabel marant sneakers http://www.isabelmarantonlinemall.com/

By: messinah

messinah — Tue, 13 Aug 2013 16:00:42 +0000

@ jose zamora and any one

use the following links to get the latest dumbs

http://www.examcollection.com/cisco
/Cisco.ActualTests.640-802.v2013-01-28.by.Spike.662q.vce.file.html and http://www.examcollection.com/cisco/Cisco.ActualTests.640-802.v2013-01-28.by.Spike.662q.vce.file.html

By: Harsh

Harsh — Fri, 02 Aug 2013 05:11:48 +0000

consider a router with an ethernet e0 and serial s0 . An inbound acl is applied to e0 .
Does it filter even the packets that are coming from the serial and entering into the e0. No acl is applied on s0 . Please HELP.
THe Q1 and the previous ACL page Q7 has kind of confused me ..

By: Anonymous

Anonymous — Mon, 29 Jul 2013 18:07:45 +0000

Hi guys,

FYI – Q7 , 8 , 9 were in the exam today.

By: superstar

superstar — Mon, 29 Jul 2013 14:22:49 +0000

on question 2
subnet cam ssh to server
but server cannot ssh to subnet

subnet can not telnet to server
but server can telnet to subnet

its a crap question.
as you have to assume it means telnet and ssh from subnet to server
and ignore the other way round.

answer b is only correct when telnetting or ssh ing from subnet to server.

By: jhon

jhon — Sun, 21 Jul 2013 14:44:05 +0000

get latest dump from.
9tut.weebly .com
(remove space before .com)

By: Florian(JanflorieMutta)

Florian(JanflorieMutta) — Sat, 20 Jul 2013 06:52:29 +0000

hello ! 9tut Guys, thenx so much for ur awesome and unquantifiably biulful materials,GLORY TO GOD FOR UR EXISTENCE, I passed yesterday with 881/1000, all questions were from 9tut and spike dumps, with approximately minor modifications.

simulations were : ACCESS-LIST2, VTP, AND EIGRP-
(EIGRP sim had alot of problems in configurations, the second router was not responding during confinguration so i decided to leave it),

By: Abe

Abe — Wed, 17 Jul 2013 10:23:34 +0000

Thanks 9tut for this great ACL exam prep questions.. it really helps reinforce this topic very glad..:)

By: HENRY OKERE

HENRY OKERE — Sat, 13 Jul 2013 08:30:55 +0000

hi admin,

i appreciate the assistance uv been in helping us with ccna questions for study…io would also ask sincerely that you try update the questions on this site to make them more relevant to us the new ccna takers, and also update the sim questions…wld luv to get a reply on my comment.
thanks a lot still.

By: Oak

Oak — Sat, 29 Jun 2013 04:04:33 +0000

q3 in exam today

By: 3C271

3C271 — Thu, 27 Jun 2013 14:08:26 +0000

Dumps are good tools to review for the exam, but be certain that the answers are correct. I came across this question, and don’t agree with the answer. Any one have any thoughts on this?

A network administrator has configured access list 173 to prevent Telnet and ICMP traffic from reaching a server with the address of 192.168.13.26. Which commands can the administrator issue to verify that the access list is working properly? (Choose three)

A. Router# ping 192.168.13.26
B. Router# debug access-list 173
C. Router# show open ports 192.168.13.26
D. Router# show access-lists
E. Router# show ip interface

The answers that are stated correct are (A), (D), (E). By performing (D) and (E), you’re looking at the configuration. But by performing (A), you’re not really testing the access list because your pinging locally from the router. The access list will not deny outbound traffic that is generated locally. How does this assist you in ensuring the ACL is working properly?

By: Tracen

Tracen — Mon, 24 Jun 2013 16:43:28 +0000

Yo, that’s what’s up trufthully.

By: JULENE

JULENE — Sun, 23 Jun 2013 10:12:21 +0000

A la pregunta esta
Which two statements apply to dynamic access lists? (choose two)

Is erroneus, I think that is the D and F.
someone can confirm?

By: Santi

Santi — Sun, 23 Jun 2013 02:10:53 +0000

I do agree with anonymous June 2nd 2013, Q1 The ACL doesn’t work in more than one direction actually, however I did the exam one year ago and the kind of responses giving here are correct.

By: Luqi

Luqi — Sat, 22 Jun 2013 05:21:06 +0000

Q2. guys the command does not have a “permit any any” at the end so hence it does not matter it would not be able to use any other protocol ? this is what i think ? if 9tut could comment on it that would be great ?

By: BeeDee

BeeDee — Fri, 21 Jun 2013 12:19:19 +0000

@anonymous, the range of ’172.16.16.0 0.0.15.255′ is from 172.16.16.1 to 172.16.31.255 while ’172.16.32.0 0.0.15.255′ is from 172.16.32.1 to 172.16.47.255. Looking at option F address 172.16.30.12 falls under the range 172.16.16.1 to 172.16.31.255, so it’s gonna be denied based on the first access list command. Hope that’s clear

By: Anonymous

Anonymous — Thu, 13 Jun 2013 05:59:39 +0000

plz help on this

access list 135 deny tcp 172.16.16.0 0.0.15.255 172.16.32.0 0.0.15.255 eq telnet
access-list 135 permit ip any any

ACL is used to control incoming packet on E0, which three statement are true

a) Address 172.16.1.1 will b denied telnet access to address 172.16.37.5
b) Address 172.16.31.1 will b permit ftp access to address 172.16.45.1
c) Address 172.16.1.1 will b permit telnet access to address 172.16.32.1
d) Address 172.16.16.1 will b permit telnet access to address 172.16.32.1
e) Address 172.16.16.1 will b permit telnet access to address 172.16.50.1
f) Address 172.16.30.12 will b denied telnet access to address 172.16.32.12

ans: b,c, e why f is wrong?

By: samar

samar — Sun, 09 Jun 2013 08:18:25 +0000

Q10 why is the answer D and not A

By: Trainer

Trainer — Sun, 02 Jun 2013 15:10:12 +0000

Anonymous Apr 5 2013,

def not D for Q4 – that’s for time-based acls

By: anonymous

anonymous — Sun, 02 Jun 2013 14:15:05 +0000

regarding ques 1:
traffic being dropped solely matters upon which direction the access list is set. this ques can’t assume that the acl is set both directions. this is wrong. this acl was made for one direction only that is towards the isp not towards the host. this ques is meaningless unless it specifies the network layout and the TWO interfaces it is applied on by a foolish administrator

By: Jose Zamora

Jose Zamora — Thu, 30 May 2013 00:20:38 +0000

If some body has the lastest dumps please share them with me I will appreciate it. CCNA certificate comes soon. jockrlos16@hotmail.com
Hola si alguien tiene los ultimos dumps para poder practicar les agradeceria si me los pueden compartir gracias. jockrlos16@hotmail.com

By: Jose Zamora

Jose Zamora — Thu, 30 May 2013 00:17:53 +0000

Hola a todos creo q la pregunta 2 al principio me confundio pero despues de analizarla bien no es tan complicada.
**********
En el punto 20 de la 100 podemos leerlo asi: se permite acceso de la red 172.16.16.0/28 con puerto de ORIGEN Telnet a el SERVER 172.16.48.63 (no especifica puerto DEST).
**********
En el punto 20 de la 101 podemos leerlo asi: se permite acceso del SERVER 172.16.48.63 a la red 172.16.16.0/28 puerto ORIGEN telnet
**********
En conclusion en ninguna de las sentencias especifica q tiene acceso al Server al puerto de destino telnet.

By: moe elppit

moe elppit — Tue, 28 May 2013 20:30:04 +0000

i need a help i need latest ccna dump and i will appreciate that
this is my email (mca.1990@hotmail.com)
my exam is too close

thanks guys

By: David Okeri

David Okeri — Fri, 24 May 2013 11:43:22 +0000

Pliz i will sit for the exam next month, can someone send me the latest dumps on email: olesimbe@yahoo.com

By: gchalwe

gchalwe — Thu, 09 May 2013 16:02:12 +0000

Hi guys i’m taking the exam on monday can u pliz send me some latest dumps..thankyou all my email address is gchalwe@yahoo.com

By: Orkhan

Orkhan — Sun, 05 May 2013 12:21:12 +0000

hello everybody.Q4 is correct it is incorrect on most of dumps ,now i just read about it from CCNA exploration 4..
have a look..

Benefits of Dynamic ACLs

Dynamic ACLs have the following security benefits over standard and static extended ACLs:

1.Use of a challenge mechanism to authenticate individual users
2.Simplified management in large internetworks
3.In many cases, reduction of the amount of router processing that is required for ACLs
4.Reduction of the opportunity for network break-ins by network hackers
5.Creation of dynamic user access through a firewall, without compromising other configured security restrictions

answer is A and F..

By: Zahid Ismail

Zahid Ismail — Sun, 05 May 2013 11:09:27 +0000

q6 in today exam

By: Anonymous

Anonymous — Sun, 28 Apr 2013 13:23:53 +0000

In Q#2
Am I understand correctly that when pocket returns from server it has- SSH source port- because
first statement in ACL 101 is port 22 not telnet. So it looks only at first statement.
Please response if this is correct.

By: mrigen sane

mrigen sane — Thu, 25 Apr 2013 15:02:06 +0000

Hi there. Taking CCNA in a weeks. Can anyone send me latest dumps?

spymrigen@gmail.com

By: luis_abimael@live.com

luis_abimael@live.com — Mon, 22 Apr 2013 15:42:44 +0000

lista de acceso extendida siempre en el lado de la direccion de origen
en este caso la direccion de origen es SVR – A 172.16.48.63/20

Y COMO LA LISTA DE ACCESO 100 SE CONFIGURO EN fa0/0 el router filtra el acceso

la lista de acceso 101 se configuro correctamente ojo
en la primera linea permite utilizar SSH
en la segunda linea no puede hacer telnet a causa de la negación implícita todo al final de la ACL.

By: luis_abimael@live.com

luis_abimael@live.com — Mon, 22 Apr 2013 15:11:54 +0000

172.16.48.63/20 es una direccion de difusion es una direccion ip invalida
teniendo 172.16.48.63/20 respuesta A

By: hari

hari — Wed, 17 Apr 2013 18:14:19 +0000

i’m taking exam,
what should i prepare well plz help me,
i’m confuesing in vlsm,cidr,subneting.

By: hari

hari — Wed, 17 Apr 2013 18:10:15 +0000

hi
i’m taking exam in few day’s

By: hari

hari — Wed, 17 Apr 2013 18:07:07 +0000

hi i’m taking exam in few day’s

By: giocancino

giocancino — Wed, 10 Apr 2013 22:41:12 +0000

Regarding Q2

traffic will be filtered 2 times, I mean once per ACL

ACL 100 is inspecting traffic coming from LAN 172.16.16.0/28 going to the SSH/Telnet Server, so a packet would look like this for SSH:

source IP: 172.16.16.20 srcport 6372 dst IP 172.16.48.63 dst port 22

for telnet :

source IP: 172.16.16.20 srcport 6372 dst IP 172.16.48.63 dst port 23

ACL 101 will inspect the REPLY, so traffic would look like:

src IP 172.16.48.63 srcport port 22 dst IP: 172.16.16.20 dstport 6372

for telnet :

src IP 172.16.48.63 src port 23 dstIP: 172.16.16.20 dst 6372

if you compare the packets against each line of the ACL´S you will see that line 20 on ACL 101 is NOT allowing the TELNET response, it seems like is allowing host 172.16.48.63 to INICIATE traffic against the network 172.16.16.0/28.
in other words line 20 on ACL101 allos this kind of packets:

src IP 172.16.48.63 srcport port 6372 dst IP: 172.16.16.20 dstport 23

Hope this Helps

By: Anonymous2

Anonymous2 — Sun, 07 Apr 2013 01:18:32 +0000

I agree with Anonymous statement on April 3, Q2 is not clear. Anyone with a better explanation why the answer is B and not D?

By: Anonymous

Anonymous — Fri, 05 Apr 2013 16:31:25 +0000

please look at question 4 it’s differ from the dumb , in the dumb the solution is D,F please support

By: Anonymous

Anonymous — Wed, 03 Apr 2013 12:41:59 +0000

Question number 2 is not clear with the explanation given.
Can anyone explain it elaborately?

By: Phat

Phat — Sat, 30 Mar 2013 05:37:05 +0000

hi everyone, at last, in q4, which are the correct answer: A&F or D&F?

By: Corneliuspostedanupdate

Corneliuspostedanupdate — Sat, 23 Mar 2013 12:14:10 +0000

I was reading through some of your articles on this internet site and I conceive this site is really informative! Retain posting. Cornelius posted an update http://bbs.6ug.net/read-htm-tid-126569.html

By: Anonymous

Anonymous — Thu, 21 Mar 2013 16:53:04 +0000

This guy butt sahib, is Nawaz’s relative and he made lot of money in Lahore model Town with the help of LDA. He is one of the Qabza groups of PMLN….

By: net-admin

net-admin — Wed, 20 Mar 2013 23:45:48 +0000

Does anyone knows are the dynamic and reflexive ACLs are tested in CCNA final exam?

thanks