ACLs and IPv4 Quiz

What is the purpose of ACLs in a router?

• To increase network performance

• All of the above

• To filter traffic based on traffic type

• To provide security for network access

What is the purpose of wildcard masks in ACLs?

• To determine which bits of the address to examine for a match

• To match every bit in the IPv4 address

• To match any host within a network

• To substitute for the 0.0.0.0 mask

Where should standard ACLs be configured for maximum efficiency?

• As close to the source of the traffic to be filtered

• As close to the destination as possible

• On firewall routers positioned between internal and external networks

• On border routers at the edge of the network

What is the purpose of the access-class command in line configuration mode?

• To clear the counters for ACL testing purposes

• To restrict incoming and outgoing connections between a VTY and the addresses in an access list

• To verify the ACL configuration used to restrict VTY access

• To display matched statistics after an ACL has been applied to an interface

What is the effect of a single-entry ACL with only one deny entry?

• It allows all traffic

• It denies all traffic

• It permits all traffic

• It has no effect on traffic

What is the order in which ACEs are processed in an ACL?

• Alphabetical order

• Reverse order

• Sequential order

• Random order

What is the purpose of the show access-lists command?

• To clear the counters for ACL testing purposes

• To display the ACLs configured on the router

• To verify that the ACL is applied to the correct interface

• To display matched statistics after an ACL has been applied to an interface

What is the most common error involving ACLs?

• All of the above

• Applying the ACL using the wrong direction

• Not specifying adequate ACL rules

• Entering ACEs in the wrong order

What is the purpose of the access-group command in interface configuration mode?

• To restrict VTY access to a router

• To link a standard IPv4 ACL to an interface

• To define a standard ACL with a number in the range of 1 through 99

• To verify the ACL configuration used to restrict VTY access

What is the purpose of the clear access-list counters command?

• To verify that the ACL is applied to the correct interface

• To restrict incoming and outgoing connections between a VTY and the addresses in an access list

• To clear the counters for ACL testing purposes

• To display matched statistics after an ACL has been applied to an interface