Question 340
During a planned campus-network change at a public library in Portland, operators discover that a policy change blocks outbound application sessions when the intent was to limit inbound traffic from guests. The design must preserve staff and visitor wireless access. Which test result most directly confirms the required behavior?
Explanation
Correct Answer
This observation tests the Ingress ACL enforcement and least privilege requirement at a public library in Portland. The expected result is that positive and negative flow tests prove only authorized source, destination and service tuples pass. The necessary correction is to apply the correctly ordered VLAN or interface ACL at the intended ingress boundary with specific permitted and denied traffic; a saved configuration alone would not prove it is working. In this case, the observed fault is that a policy change blocks outbound application sessions when the intent was to limit inbound traffic from guests.
Incorrect Answers
At a public library in Portland, the observation may be useful for a separate SVI gateway and inter-VLAN reachability test, but it does not establish that a policy change blocks outbound application sessions when the intent was to limit inbound traffic from guests has been resolved. The relevant check is the Ingress ACL enforcement and least privilege outcome.
At a public library in Portland, this measures a different network requirement, LACP aggregation and member consistency. The case describes that a policy change blocks outbound application sessions when the intent was to limit inbound traffic from guests, so accepting this result would leave the primary fault without direct verification.
At a public library in Portland, this would verify VLAN trunk and native VLAN consistency, not the failure reported in this scenario. The requested closure criterion instead concerns Ingress ACL enforcement and least privilege: positive and negative flow tests prove only authorized source, destination and service tuples pass.