Question 460
A distribution switch applies an ingress ACL to a routed SVI, but administrators expect it to block frames bridged only inside the same VLAN. Which result would best establish that the correction succeeded?
Explanation
Correct Answer
This is an operational test of the required outcome rather than merely proof a setting exists. It checks that an L3 SVI ACL may not inspect traffic that never traverses that routed interface no longer prevents the service.
Incorrect Answers
This result may validate another network change, but it does not demonstrate recovery from the fault here: an L3 SVI ACL may not inspect traffic that never traverses that routed interface.
That explanation does not distinguish this option. “Every host in the defined subnet can reach the correct local gateway and route to approved peers” is an alternative action, but it does not by itself establish the outcome required in this case.
That explanation does not distinguish this option. “The stream is delivered to subscribed receivers while uninterested ports show no unwanted multicast load” is an alternative action, but it does not by itself establish the outcome required in this case.