Which of the following is a command you would find in an antispoofing ACL for network 172.31.0.0/16?
A) permit ip any 172.31.0.0 0.0.255.255 log
B) deny TCP 172.31.0.0 0.0.0.0 any log
C) deny ip 172.31.0.0 0.0.255.255 any log
D) permit icmp any any redirect

Question

Quizplus · Accepted Answer

The purpose of an antispoofing ACL is to prevent traffic with spoofed source IP addresses from entering the network. Therefore, the ACL should deny all traffic with a source IP address within the network (172.31.0.0/16) going out to any destination IP address. Option C denies all IP traffic from the network to any destination, which is the correct command for an antispoofing ACL. The other options either allow traffic from any source IP address or are not relevant to the objective of an antispoofing ACL.

Which of the Following Is a Command You Would Find