mediumMultiple ChoiceObjective-mapped
300-410 Practice Question: Given the following partial configuration on a…
Given the following partial configuration on a router:
ip access-list standard FILTER_SNMP permit 192.168.1.0 0.0.0.255 deny any
!
snmp-server community public RO FILTER_SNMP snmp-server location DataCenter snmp-server contact admin@example.com
What is the effect of this configuration?
⚠ Common exam trap
Cisco often tests the distinction between applying an ACL to an SNMP community versus applying it to an interface; the trap here is that candidates may think the ACL filters outbound SNMP responses or that the ACL is not applied correctly, but in reality, it filters incoming SNMP requests based on source IP.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Only SNMP requests from the 192.168.1.0/24 network are allowed with the community string 'public'.
The configuration applies the standard ACL 'FILTER_SNMP' to the SNMP community string 'public' with read-only (RO) access. The ACL permits only the 192.168.1.0/24 network, so SNMP requests (e.g., GET, GETNEXT) from that subnet are allowed, while all other sources are denied. This is the intended effect of using an ACL to restrict SNMP access by source IP.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Only SNMP requests from the 192.168.1.0/24 network are allowed with the community string 'public'.
Why this is correct
The ACL permits the specified subnet, and the community string is tied to that ACL.
- ✗
SNMP requests from any source are allowed because the ACL is not applied correctly.
Why it's wrong here
The ACL is referenced in the snmp-server community command, so it is applied.
- ✗
The community string 'public' allows read-write access.
Why it's wrong here
The 'RO' keyword specifies read-only access.
- ✗
The ACL is applied outbound, so SNMP responses are filtered.
Why it's wrong here
The ACL in the snmp-server community command filters incoming SNMP requests, not responses.
Visual reference
Go deeper
Related to this question
About these practice questions
This 300-410 question is part of Courseiva's 1,966-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.