If you wanted to deny all telnet connections to only network192.168.10.0, which command could you use?

Question

Group of answer choices

access-list 100 deny tcp any 192.168.10.0 0.0.0.255 eq 23

access-list 100 deny 192.168.10.0 0.0.0.255 any eq 23

access-list 100 deny tcp 192.168.10.0 255.255.255.0 eq telnet

access-list 100 deny tcp 192.168.10.0 0.255.255.255 eq telnet

Answer 1

To deny all Telnet connections to the network 192.168.10.0, you would use the command that specifically targets TCP traffic on port 23 (the default port for Telnet) from any source to the specified network.

The correct command from your options would be:

access-list 100 deny tcp any 192.168.10.0 0.0.0.255 eq 23

This command denies TCP traffic (which includes Telnet, as it operates over TCP) from any source to the destination network 192.168.10.0 with a wildcard mask of 0.0.0.255 (this covers the entire subnet), specifically targeting port 23.

The other options either have incorrect order, incorrect masking, or incorrect specifications regarding sources and destinations.