Multiple choice

Which IP address and wildcard mask would be used in an ACL to block traffic from all hosts on the same subnet as host 192.168.16.43/28?

  1. access-list 10 deny 192.168.16.0 0.0.0.31

  2. access-list 10 deny 192.168.16.16 0.0.0.31

  3. access-list 10 deny 192.168.16.32 0.0.0.16

  4. access-list 10 deny 192.168.16.32 0.0.0.15

Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

The host 192.168.16.43/28 belongs to the subnet 192.168.16.32/28 (addresses 192.168.16.32 to 192.168.16.47). A /28 mask corresponds to a wildcard mask of 0.0.0.15. The ACL statement must use the network address (192.168.16.32) paired with the wildcard mask (0.0.0.15) to match all hosts in that subnet.