Access-list question, some

so LAN-A has 2 PC 192.168.18.46 and 192.168.18.62 and according to the simulation i got, ipconfig shows that subnetmask for both IP address is 255.255.255.240

so first of all, according to subnet mask, they are not even in same subnet, and secondly, correct answer is

access-list 100 permet tcp 192.168.18.32 0.0.0.31 which is equivalent of subnetmask 255.255.255.224

yes, than it is correct, but only part i got it wrong is wildcard mask 0.0.0.31(my answer was 0.0.0.15)

So, is my answer wrong, or the structure of the question built wrong? I am really sick and tired of stupidly structured question. I have 2 different practice test run by test engine, and one reputable PDF test. All has wrong answers here and there.

How come they can not catch it, if i can(fellow CCNA wannabe) catch it?

Find more posts tagged with

SAVE $250 on Your CISCO Boot Camp — Use Code "EXAM26"

Exclusively for TechExams members for Infosec Boot Camps starting before April 30, 2026

View CISCO Boot Camps

Comments

xXErebuS

You're right about the subnet mask it should be 255.255.255.224 given those IP addresses. You're wrong about the wild card mask; they are right (b/c its a /27).

NetworkVeteran

TurK-FX wrote: »

so LAN-A has 2 PC 192.168.18.46 and 192.168.18.62, subnetmask for both IP address is 255.255.255.240

access-list 100 permet tcp 192.168.18.32 0.0.0.31

yes, than it is correct, but only part i got it wrong is wildcard mask 0.0.0.31(my answer was 0.0.0.15)

If you're looking for a single ACL that permits both LANs but denies others, their wildcard mask is correct and yours is wrong. Your answer would only permit one LAN. As they say, "Close only counts in horseshoes and hand grenades".

TurK-FX

yes, subnetmask is 27 when you corrected the given subnet mask. But with the given subnetmask 255.255.255.240, wilcard mask should be 0.0.0.15
if they given correct subnetmask, i would have choose the correct wilcardmask. I only check the PC1 when i was answering the sim, cus question was asking that, only permit the subnet from PC1 to reach only to the telnet on the other lan. and my answer was

Considering ip address of PC1 192.168.18.46 255.255.255.240 and default-gateway 192.168.18.33
my answer was
#access-list 100 permit TCP 192.168.18.32 0.0.0.15 192.168.118.96 0.0.0.15 eq 23
#int ser0/0
#IP access-group 100 out (it was asked to assign to serial which is outgoing interface)

jmasterj206

I am pretty sure that is from Boson. It is a rather poorly worded question. There are trying to ask you to do both PC's and not just PC1.

TurK-FX

Yes, it is from boson, but not just wording. They put the wrong subnetmask. I figured it out afterwards, but my answer was wrong due to giving missing information in the question