問題文
An access list on a router denies traffic from one subnet to a management network, and logging of denials is not enabled on that entry. An analyst later wants to know whether hosts in that subnet attempted to reach the management network. What is the effect of the access list on that question?
選択肢
- The access list has no effect on visibility, only on reachability.
- The attempts appear in the flow records exported by the same router, because a flow record is created when the packet arrives and the access list only decides whether the packet is forwarded after the record has already been written.
- The attempts are recorded on the destination hosts in the management network, where each refused connection appears in the local log of that host.
- The analyst has to look at records taken before the packets reached it, because the attempts left no record at that router.