A. Router(config)# access-list 1 deny 172.31.212.74 any
B. Router(config)# access-list 1 deny 10.6.111.48 host
C. Router(config)# access-list 1 deny 172.16.4.13 0.0.0.0
D. Router(config)# access-list 1 deny 192.168.14.132 255.255.255.0
E. Router(config)# access-list 1 deny 192.168.166.127 255.255.255.255
Answer: C
Explanation:
Only choice C is the correct syntax for a specific host. The access list is denying all traffic from the host with IP address 172.16.4.13. It is important to note that in an access list, the subnet mask is the inverse. Normally, a host subnet mask is 255.255.255.255, but in an access list it is 0.0.0.0.
Incorrect Answers:
A. The syntax is incorrect here, as there is no subnet mask at all specified.
B. This would be an acceptable choice, if the "host" keyword were placed in front of the IP address, not after.
D. The subnet mask here includes the entire class C network here, not an individual host.
E. In an access list, the subnet mask is an inverse mask. The mask specified here would be equivalent to all 0's in a subnet mask, meaning that the don't care bits apply to the entire address.
B. Router(config)# access-list 1 deny 10.6.111.48 host
C. Router(config)# access-list 1 deny 172.16.4.13 0.0.0.0
D. Router(config)# access-list 1 deny 192.168.14.132 255.255.255.0
E. Router(config)# access-list 1 deny 192.168.166.127 255.255.255.255
Answer: C
Explanation:
Only choice C is the correct syntax for a specific host. The access list is denying all traffic from the host with IP address 172.16.4.13. It is important to note that in an access list, the subnet mask is the inverse. Normally, a host subnet mask is 255.255.255.255, but in an access list it is 0.0.0.0.
Incorrect Answers:
A. The syntax is incorrect here, as there is no subnet mask at all specified.
B. This would be an acceptable choice, if the "host" keyword were placed in front of the IP address, not after.
D. The subnet mask here includes the entire class C network here, not an individual host.
E. In an access list, the subnet mask is an inverse mask. The mask specified here would be equivalent to all 0's in a subnet mask, meaning that the don't care bits apply to the entire address.