Lecture 13

An enterprise needs to prevent the R&D department from accessing the financial department server while allowing the president's office access. Which tool is most suitable for this purpose?

• Firewall

• ACL

• NAT

• QoS

An ACL is composed of which elements?

• Permit and deny statements

• Allow and block statements

• Accept and reject statements

• Forward and drop statements

What can an ACL match to filter traffic? (Choose all that apply)

• Source IP address

• Destination IP address

• Source and destination port numbers

• VLAN ID

If an ACL has rules numbered 10, 20, and 30, and a new rule is added without a specified ID, what will its ID be if the default step is 5?

• 15

• 25

• 35

• 40

What does a wildcard in an ACL do?

• It specifies which bits in an IP address to match.

• It defines the priority of ACL rules.

• It assigns IDs to ACL rules.

• It determines the ACL matching order.

Which type of ACL is identified by numbers ranging from 3000 to 3999?

• Basic ACL

• Advanced ACL

• Layer 2 ACL

• User-defined ACL

How does the system match packets against ACL rules by default?

• In descending order of rule ID

• Randomly

• Based on the packet arrival time

• In ascending order of rule ID

To filter traffic before it enters an interface, where should you apply an ACL?

• Inbound direction

• Outbound direction

• Both inbound and outbound directions

• None of the above

Which ACL type defines rules based on information in Ethernet frame headers, such as source and destination MAC addresses?

• Layer 2 ACL

• Basic ACL

• Advanced ACL

• User ACL

An ACL needs to match all IP addresses. What wildcard mask should be used?

• 0.0.0.0 0.0.0.0

• 0.0.0.0 255.255.255.255

• 255.255.255.255 255.255.255.255

• 0.0.0.0 255.255.255.255