R&S Ch 7

In which configuration would an outbound ACL placement be preferred over an inbound ACL placement?

• when the ACL is applied to an outbound interface to filter packets coming from multiple inbound interfaces before the packets exit the interface

• when a router has more than one ACL

• when an outbound ACL is closer to the source of the traffic flow

• when an interface is filtered by an outbound ACL and the network attached to the interface is the source network being filtered within the ACL

Which address is required in the command syntax of a standard ACL?

• destination IP address

• source IP address

• destination MAC address

• source MAC address

Which statement describes a difference between the operation of inbound and outbound ACLs?

• In contrast to outbound ALCs, inbound ACLs can be used to filter packets with multiple criteria.

• Inbound ACLs can be used in both routers and switches but outbound ACLs can be used only on routers.

• Inbound ACLs are processed before the packets are routed while outbound ACLs are processed after the routing is completed.

• On a network interface, more than one inbound ACL can be configured but only one outbound ACL can be configured.

An implicit deny any rejects any packet that does not match any ACE.

• true

• false

A packet can either be rejected or forwarded as directed by the ACE that is matched.

• true

• false

A packet that has been denied by one ACE can be permitted by a subsequent ACE.

• true

• false

A packet that does not match the conditions of any ACE will be forwarded by default.

• true

• false

Each statement is checked only until a match is detected or until the end of the ACE list.

• true

• false

Each packet is compared to the conditions of every ACE in the ACL before a forwarding decision is made.

• true

• false

What single access list statement matches all of the following networks?

192.168.16.0

192.168.17.0

192.168.18.0

192.168.19.0

• access-list 10 permit 192.168.0.0 0.0.15.255

• access-list 10 permit 192.168.16.0 0.0.15.255

• access-list 10 permit 192.168.16.0 0.0.0.255

• none of the above