Module 4 - ACLs Concepts

Refer to the exhibit. Network 192.168.30.0/24 contains all of the company servers. Policy dictates that traffic from the servers to both networks 192.168.10.0 and 192.168.11.0 be limited to replies for original requests. What is the best ACL type and placement to use in this situation?

• extended ACL inbound on R3 G0/0

• extended ACL inbound on R3 S0/0/1

• standard ACL inbound on R1 vty lines

• extended ACLs inbound on R1 G0/0 and G0/1

Refer to the exhibit. The company has provided IP phones to employees on the 192.168.10.0/24 network and the voice traffic will need priority over data traffic. What is the best ACL type and placement to use in this situation?

• extended ACL inbound on R3 G0/0

• extended ACL inbound on R3 S0/0/1

• standard ACL inbound on R1 vty lines

• extended ACLs inbound on R1 G0/0

Refer to the exhibit. The network administrator has an IP address of 192.168.11.10 and needs access to manage R1. What is the best ACL type and placement to use in this situation?

• extended ACL outbound on R2 WAN interface towards the internet

• extended ACL outbound on R2 S0/0/1

• standard ACL inbound on R1 vty lines

• extended ACLs inbound on R1 G0/0 and G0/1

Refer to the exhibit. Internet privileges for an employee have been revoked because of abuse but the employee still needs access to company resources. What is the best ACL type and placement to use in this situation?

• standard ACL outbound on R2 WAN interface towards the internet

• standard ACL outbound on R2 WAN interface connecting to the internet

• standard ACL inbound on R1 G0/0

• standard ACL outbound on R1 G0/0

Refer to the exhibit. An administrator has configured a standard ACL on R1 and applied it to interface serial 0/0/0 in the outbound direction. What happens to traffic leaving interface serial 0/0/0 that does not match the configured ACL statements?

• The resulting action is determined by the destination IP address.

• The resulting action is determined by the destination IP address and port number.

• The source IP address is checked and, if a match is not found, traffic is routed out interface serial 0/0/1.

• The traffic is dropped.

Refer to the exhibit. The Gigabit interfaces on both routers have been configured with subinterface numbers that match the VLAN numbers connected to them. PCs on VLAN 10 should be able to print to the P1 printer on VLAN 12. PCs on VLAN 20 should print to the printers on VLAN 22. What interface and in what direction should you place a standard ACL that allows printing to P1 from data VLAN 10, but stops the PCs on VLAN 20 from using the P1 printer? (Choose two.)

• R1 Gi0/1.12

• R1 S0/0/0

• outbound

• R2 Gi0/1.20

• inbound

Which statement describes a characteristic of standard IPv4 ACLs?

• They are configured in the interface configuration mode.

• They filter traffic based on source IP addresses only.

• They can be created with a number but not with a name.

• They can be configured to filter traffic based on both source IP addresses and source ports.

What wild card mask will match networks 172.16.0.0 through 172.19.0.0?

• 0.0.3.255

• 0.0.255.255

• 0.252.255.255

• 0.3.255.255

Which two keywords can be used in an access control list to replace a wildcard mask or address and wildcard mask pair? (Choose two.)

• most

• host

• all

• any

• gt

Which two packet filters could a network administrator use on an IPv4 extended ACL? (Choose two.)

• destination MAC address

• ICMP message type

• computer type

• source TCP hello address

• destination UDP port number