Which will fix the issue and allow ONLY ping to work while keeping telnet disabled? Exhibit:A. Correctly assign an IP address to interface fa0/1. B. Change the ip access-group command on fa0/0 from "in* to "our. C. Remove access-group 106 in from interface fa0/0 and add access-group 115 in. D. Remove access-group 102 out from interface s0/0/0 and add access-group 114 in E. Remove access-group 106 in from interface fa0/0 and add access-group 104 in. Â Suggested Answer: E Let's have a look at the access list 104: <img src="https://www.examtopics.com/assets/media/exam-media/01508/n26076500001.png" alt="Reference Image" /> The question does not ask about ftp traffic so we don't care about the two first lines. The 3rd line denies all telnet traffic and the 4th line allows icmp traffic to be sent (ping). Remember that the access list 104 is applied on the inbound direction so the 5th line "access-list 104 deny icmp any any echo-reply" will not affect our icmp traffic because the "echo-reply" message will be sent over the outbound direction. This question is in CCNA 200-125 exam For getting CCNA Certificate Disclaimers: The website is not related to, affiliated with, endorsed or authorized by Cisco. Trademarks, certification & product names are used for reference only and belong to Cisco.
Please login or Register to submit your answer