An enterprise is trying to limit outbound DNS traffic originating from its internal network. Outbound DNS requests will only be allowed from one device with the IP address 10.50.10.25. Which of the following firewall ACLs will accomplish this goal?
Choose an answer
Tap an option to check your answer.
Correct answer: Access list outbound permit 10.50.10.25/32 0.0.0.0/0 port 53 Access list outbound deny 0.0.0.0/0 0.0.0.0/0 port 53.
Why this is the answer
The correct ACL allows outbound DNS (port 53) traffic only from the specified IP address (10.50.10.25/32). The first rule explicitly permits this traffic, and the second rule then denies all other outbound DNS traffic from any other source (0.0.0.0/0). ACLs are processed in order, and the first match is applied. The other options are incorrect because they either deny the specified IP, permit all traffic before denying, or have incorrect source/destination pairings. For example, "Access list outbound permit 0.0.0.0/0 0.0.0.0/0 port 53" would permit all DNS traffic, defeating the purpose of restricting it.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed