A company starts to have issues with too many rules in the dynamic ACLs applied to AOS-Switch ports. Administrators decide to remove some of the common rules from the dynamic ACLs and enforce them in an ACL applied to the users’ VLAN instead.
What is one rule that administrators should keep in mind to ensure that the new ACLs control traffic as they expect?
A. ACLs applied to VLANs cannot control ICMP traffic, do the dynamic ACLs must include the ICMP rules.
B. Administrators should add an explicit deny at the end of the dynamic ACLs, so traffic will hit VLAN ACL.
C. Traffic must be permitted by both the dynamic ACL and the VLAN ACL in order to be permitted.
D. If a port supports multiple clients, every dynamic ACL applied to one client filters traffic for all clients.
|
Download Printable PDF. VALID exam to help you PASS. |
 |