CISCO CCNA 200-301 Q3

Refer to the exhibit. A network engineer must block access for all computers on VLAN 20 to the web server via HTTP. All other computers must be able to access the webserver. Which configuration when applied to switch A accomplishes this task?


A.
config t
ip access-list extended wwwblock deny tcp any host 10.20.0.100 eq 80 int vlan 10
ip access-group wwwblock in

B.
config t
ip access-list extended wwwblock deny tcp any host 10.20.0.100 eq 80 permit ip any any
int vlan 20
ip access-group wwwblock in

C.
config t
ip access-list extended wwwblock permit ip any any
deny tcp any host 10.20.0.100 eq 80 int vlan 30
ip access-group wwwblock in

D.
config t
ip access-list extended wwwblock permit ip any any
deny tcp any host 10.20.0.100 eq 80 int vlan 20
ip access-group wwwblock in

Correct Answers: B

Explanation:
The “permit ip any any” command should be placed at the end of the access list.