300-410 question 40: Refer to the exhibit. While monitoring an IPv6 access list, an engi…

Q40Layer 3 Technologies

Refer to the exhibit. While monitoring an IPv6 access list, an engineer observes that the ACL has no hits and is allowing unnecessary traffic through the interface. Which command must be configured to resolve the issue?

← → navigate · a answer

Community votes

86% (12)

14% (2)

0% (0)

Discussion · 18

B 7

Selected Answer: B It’s asking for the interface, which is why traffic-filter. Access-class is used for the control plane.

B 4

Selected Answer: B B, because it is talking about unnecessary traffic for the interface. Access Class is for applying Line vty ACL.

B 3

Selected Answer: B traffic-filter

B 3

Selected Answer: B the correct answer is B: Line vty: acces-class line interface: traffic-filter https://www.cisco.com/c/en/us/td/docs/ios/ipv6/command/reference/ipv6_book/ipv6_05.html#wp2274594

B 3

Selected Answer: B Answer is B

B 3

Selected Answer: B i agree, it's B

B 3

Selected Answer: B R1(config-if)#ipv6 traffic-filter ? WORD Access-list name R1(config-if)#ipv6 traffic-filter

C - is Incorrect. There's no access-class in IPv6 R4(config-if)#ipv6 access-class INTERNET in ^

B 2

Selected Answer: B As AliMo123 says

B 2

Selected Answer: B B is correct. R2(config-if)#ipv6 traff? traffic-filter R2(config-if)#ipv6 acces? % Unrecognized command R2(config-if)#ipv6 acces

B 2

Selected Answer: B Answer is B

C 2

Selected Answer: C I'm going with C, because it denies and permits the telnet traffic, so this ACl must be applied under the VTY lines, so for VTY line we must use Applying an IPv6 ACL to the Virtual Terminal Line SUMMARY STEPS 1. enable 2. configure terminal 3. line [aux| console| tty| vty] line-number[ending-line-number] 4. ipv6 access-class ipv6-access-list-name {in| out} https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_acl/configuration/xe-16/sec-data-acl-xe-16-book/ip6-acls-xe.html

B 2

Selected Answer: B It's an IPv6 ACL. On an interface, traffic-filter is used to apply the IPv6 ACL

Bad ipv6 acl… breaks neighbor discovery. Otherwise..B

When reading the link mentioned, it's clear the answer is B, as Alimo also says

C 1

Selected Answer: C Traffic filter

B is correct https://community.cisco.com/t5/network-security/ipv6-access-class-vs-ipv6-traffic-filter/td-p/1510357#:~:text=The%20%27ipv6%20access-class%27%20command%20is%20used%20to%20filter,%28i.e.%20management%20traffic%29.%20Command%20reference%20%28with%20example%29%3A%20http%3A%2F%2Fwww.cisco.com%2Fen%2FUS%2Fdocs%2Fios%2Fipv6%2Fcommand%2Freference%2Fipv6_05.html%23wp2274594

So line vty isn't a real interface?