Module 4

What are the permit or deny statements in an ACL called?

• access control entries
• arbitrary statements
• content control entries
• control statements

Which packet filtering statement is true?

• Extended ACLs filter at Layer 3 only.
• Extended ACLs filter at Layer 4 only.
• Standard ACLs filter at Layer 3 only.
• Standard ACLs filter at Layer 4 only.

Which statement about the operation of a standard ACL is incorrect?

• If there are no matching ACEs in the ACL, the packet is forwarded because there is an implicit permit ACE automatically applied to all ACLs.
• The router extracts the source IPv4 address from the packet header.
• The router starts at the top of the ACL and compares the address to each ACE in sequential order.
• When a match is made, the ACE either permits or denies the packet, and any remaining ACEs are not analyzed.

Which wildcard mask would permit all hosts from the 192.168.10.0/24 network?

• 0.0.0.0
• 0.0.0.31
• 0.0.0.255
• 0.0.255.255
• 255.255.255.255

Which wildcard mask would permit all hosts?

• 0.0.0.0
• 0.0.0.31
• 0.0.0.255
• 0.0.255.255
• 255.255.255.255

Which wildcard mask would permit only host 10.10.10.1?

• 0.0.0.0
• 0.0.0.31
• 0.0.0.255
• 0.0.255.255
• 255.255.255.255

Which wildcard mask would permit only hosts from the 10.10.0.0/16 network?

• 0.0.0.0
• 0.0.0.31
• 0.0.0.255
• 0.0.255.255
• 255.255.255.255

How many total ACLs (both IPv4 and IPv6) can be configured on an interface?

• 0
• 1
• 2
• 4
• 8

Which of the following is an ACL best practice?

• Always test ACLs on a production network.
• Create your ACLs on a production router.
• Document the ACLs using the description ACL command.
• Write the ACL before configuring it on a router.

Where should a standard ACL be placed?

• Standard ACL location is not important.
• Standard ACLs should be placed as close to the destination as possible.
• Standard ACLs should be placed as close to the source as possible.
• Standard ACLs should be placed on serial interfaces.