The two access control entries that can be used to deny IP traffic from a source host 10.1.1.1 to the destination network 192.168.0.0/16 are:

A) Access-list 100 deny ip host 10.1.1.1 192.168.0.0 0.0.255.255
B) Access-list 100 deny ip 192.168.0.0 0.0.255.255 host 10.1.1.1
C) Access-list 100 deny ip 192.168.0.0 0.0.255.255 10.1.1.1 0.0.0.0
D) Access-list 100 deny ip 10.1.1.1 255.255.255.255 192.168.0.0 0.0.255.255

Answer :

Final answer:

The correct options are A) Access-list 100 deny ip host 10.1.1.1 192.168.0.0 0.0.255.255, B) Access-list 100 deny ip 192.168.0.0 0.0.255.255 host 10.1.1. The answer explains the two correct access control entries to deny IP traffic between a source host and a destination network.

Explanation:

The correct options are A) Access-list 100 deny ip host 10.1.1.1 192.168.0.0 0.0.255.255, B) Access-list 100 deny ip 192.168.0.0 0.0.255.255 host 10.1.1. The two access control entries that can be used to deny IP traffic from a source host 10.1.1.1 to the destination network 192.168.0.0/16 are:

  1. Access-list 100 deny ip host 10.1.1.1 192.168.0.0 0.0.255.255
  2. Access-list 100 deny ip 192.168.0.0 0.0.255.255 host 10.1.1.1

These access control entries specify the denial of traffic from the specified source IP to the destination network using the correct syntax for an Access Control List.