DFN5013 Chapter2 Access Control Lists

Which address is required in the command syntax of a standard ACL?

• source MAC address

• source IP address

• destination IP address

• destination MAC address

Which statement describes a difference between the operation of inbound and outbound ACLs?

• In contrast to outbound ALCs, inbound ACLs can be used to filter packets with multiple criteria.

• Inbound ACLs can be used in both routers and switches but outbound ACLs can be used only on routers.

• On a network interface, more than one inbound ACL can be configured but only one outbound ACL can be configured.

• Inbound ACLs are processed before the packets are routed while outbound ACLs are processed after the routing is completed.

What single access list statement matches all of the following networks?

192.168.16.0

192.168.17.0

192.168.18.0

192.168.19.0

• access-list 10 permit 192.168.16.0 0.0.0.255

• access-list 10 permit 192.168.0.0 0.0.15.255

• access-list 10 permit 192.168.16.0 0.0.15.255

• access-list 10 permit 192.168.16.0 0.0.3.255

If a router has two interfaces and is routing both IPv4 and IPv6 traffic, how many ACLs could be created and applied to it?

• 4

• 6

• 8

• 12

Which type of ACL statements are commonly reordered by the Cisco IOS as the first ACEs?

• host

• range

• permit any

• lowest sequence number

A network administrator is configuring an ACL to restrict access to certain servers in the data center. The intent is to apply the ACL to the interface connected to the data center LAN. What happens if the ACL is incorrectly applied to an interface in the inbound direction instead of the outbound direction?

• All traffic is denied.

• All traffic is permitted.

• The ACL does not perform as designed.

• The ACL will analyze traffic after it is routed to the outbound interface.

What is the effect of configuring an ACL with only ACEs that deny traffic?

• The ACL will block all traffic.

• The ACL must be applied inbound only.

• The ACL must be applied outbound only.

• The ACL will permit any traffic that is not specifically denied.

A network administrator issues the show vlan brief command while troubleshooting a user support ticket. What output will be displayed?

• the VLAN assignment and native VLAN

• the VLAN assignment and trunking encapsulation

• the VLAN assignment and membership for all switch ports

• the VLAN assignment and membership for device MAC addresses

An administrator has configured an access list on R1 to allow SSH administrative access from host 172.16.1.100. Which command correctly applies the ACL?

• R1(config-if)# ip access-group 1 in

• R1(config-if)# ip access-group 1 out

• R1(config-line)# access-class 1 in

• R1(config-line)# access-class 1 out

Which IPv4 address range covers all IP addresses that match the ACL filter specified by 172.16.2.0 with wildcard mask 0.0.1.255?

• 172.16.2.0 to 172.16.2.255

• 172.16.2.1 to 172.16.3.254

• 172.16.2.0 to 172.16.3.255

• 172.16.2.1 to 172.16.255.255