Which of the following is an ACL best practice?

Write the ACL before configuring it on a router.

Always test ACLs on a production network.

Create your ACLs on a production router.

Document the ACLs using the description ACL command.

Where should a standard ACL be placed?

Standard ACLs should be placed as close to the destination as possible.

Standard ACL location is not important.

Standard ACLs should be placed as close to the source as possible.

Standard ACLs should be placed on serial interfaces.

Where should an extended ACL be placed?

Extended ACLs should be located as close to the source as possible.

Extended ACL location is not important.

Extended ACLs should be located as close to the destination as possible.

Extended ACLs should be located on serial interfaces.

Which statement about ACLs is true?

Named ACLs can be standard or extended.

Extended ACLs are numbered 1300 – 2699.

Numbered ACLs is the preferred method to use when configuring ACLs.

Standard ACLs are numbered 1 – 199.

A network administrator is configuring an ACL to restrict access to certain servers in the data center. The intent is to apply the ACL to the interface connected to the data center LAN. What happens if the ACL is incorrectly applied to an interface in the inbound direction instead of the outbound direction?

The ACL does not perform as designed.

The ACL will analyze traffic after it is routed to the outbound interface.

If the provided ACEs are in the same ACL, which ACE should be listed first in the ACL according to best practice?

permit udp 172.16.0.0 0.0.255.255 host 172.16.1.5 eq snmptrap

deny udp any host 172.16.1.5 eq snmptrap

permit tcp 172.16.0.0 0.0.3.255 any established

In applying an ACL to a router interface, which traffic is designated as outbound?

traffic that is leaving the router and going toward the destination host

traffic for which the router can find no routing table entry

traffic that is coming from the source IP address into the router

traffic that is going from the destination IP address into the router

In which configuration would an outbound ACL placement be preferred over an inbound ACL placement?

When the ACL is applied to an outbound interface to filter packets coming from multiple inbound interfaces before the packets exit the interface

When a router has more than one ACL

When an interface is filtered by an outbound ACL and the network attached to the interface is the source network being filtered within the ACL

When an outbound ACL is closer to the source of the traffic flow

What single access list statement matches all of the following networks? 192.168.16.0 192.168.17.0 192.168.18.0 192.168.19.0

access-list 10 permit 192.168.16.0 0.0.3.255

access-list 10 permit 192.168.0.0 0.0.15.255

access-list 10 permit 192.168.16.0 0.0.0.255

access-list 10 permit 192.168.16.0 0.0.15.255

What two functions describe uses of access control lists? (Choose two.)

ACLs can control which areas a host can access on a network.

ACLs provide a basic level of security for network access.

ACLs assist a router in determining the best path to a destination.

Standard ACLs can filter traffic based on source and destination network addresses.

Standard ACLs can restrict access to specific applications and ports.

Which location is recommended for extended numbered or extended named ACLs?

a location as close to the source of traffic as possible

a location as close to the destination of traffic as possible

a location centered between traffic destinations and sources to filter as much traffic as possible

if using the established keyword, a location close to the destination to ensure that return traffic is allowed

Which scenario would cause an ACL misconfiguration and deny all traffic?

Apply an ACL that has all deny ACE statements.

Apply a named ACL to a VTY line.

Apply a standard ACL in the inbound direction.

Apply a standard ACL using the ip access-group outcommand.

Which statement describes a characteristic of standard IPv4 ACLs?

They filter traffic based on source IP addresses only.

They can be configured to filter traffic based on both source IP addresses and source ports.

They can be created with a number but not with a name.

They filter traffic based on destination IP addresses only.

Which three statements are best practices related to placement of ACLs? (Choose three.)

Filter unwanted traffic before it travels onto a low-bandwidth link.

Place extended ACLs close to the source IP address of the traffic.

Place standard ACLs close to the destination IP address of the traffic.

For every inbound ACL placed on an interface, ensure that there is a matching outbound ACL.

Place extended ACLs close to the destination IP address of the traffic.

Which three statements describe ACL processing of packets? (Choose three.)

A packet can either be rejected or forwarded as directed by the ACE that is matched.

An implicit deny any rejects any packet that does not match any ACE.

Each statement is checked only until a match is detected or until the end of the ACE list.

A packet that has been denied by one ACE can be permitted by a subsequent ACE.

Each packet is compared to the conditions of every ACE in the ACL before a forwarding decision is made.

Which three statements describe how an ACL processes packets? (Choose three.)

An implicit deny at the end of an ACL rejects any packet that does not match an ACE.

Each ACE is checked only until a match is detected or until the end of the ACL.

If an ACE is matched, the packet is either rejected or forwarded, as directed by the ACE.

A packet is compared with all ACEs in the ACL before a forwarding decision is made.

A packet that has been denied by one ACE can be permitted by a subsequent ACE.

Which two characteristics are shared by standard and extended ACLs? (Choose two.)

Both include an implicit deny as a final entry.

They can be created by using either descriptive names or numbers.

Both filter packets for a specific destination host IP address.

Both permit or deny specific services by port number.

They both filter based on protocol type.

Which two conditions would cause a router to drop a packet? (Choose two.)

No routing table entry exists for the packet destination, but the packet matches a permitted address in an outbound ACL.

The packet source address does not match the source as permitted in a standard inbound ACE.

No inbound ACL exists on the interface where the packet enters the router.

No outbound ACL exists on the interface where the packet exits the router.

The ACL that is affecting the packet does not contain at least one deny ACE.

Which two statement describes a difference between the operation of inbound and outbound ACLs? (Choose two.)

Inbound ACLs are processed before the packets are routed.

Outbound ACLs are processed after the routing is completed.

Inbound ACLs can be used in both routers and switches.

Multiple inbound ACLs can be applied to an interface.

Multiple outbound ACLs can be applied to an interface.

Which two statements describe appropriate general guidelines for configuring and applying ACLs? (Choose two.)

If an ACL contains no permit statements, all traffic is denied by default.

The most specific ACL statements should be entered first because of the top-down sequential nature of ACLs.

If a single ACL is to be applied to multiple interfaces, it must be configured with a unique number for each interface.

Multiple ACLs per protocol and per direction can be applied to an interface.

Standard ACLs are placed closest to the source, whereas extended ACLs are placed closest to the destination.

Module 4

University

•

37 Qs

Similar activities

MTA Windows OS Fundamentals Test 1

9th Grade - Professional Development

•

35 Qs

Simulasi Digital

12th Grade - Professional Development

•

40 Qs

Security Part 2( Technical Diploma)

University

•

35 Qs

Soal WAN Tkj kls 2

University

•

41 Qs

UJIAN MID SEMESTER 1 X RPL SISTEM KOMPUTER

University

•

35 Qs

MOS Word 2016 - Quiz 2

University

•

34 Qs

ASD62

University

•

40 Qs

Class Test 1 - CSE 443 (Mobile Telecommunication)

University

•

40 Qs

Module 4

Quiz

•

Computers

•

University

•

Practice Problem

•

Medium

Ricky Zhanghao

Used 3+ times

FREE Resource

37 questions

Show all answers

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

What are the permit or deny statements in an ACL called?

access control entries

arbitrary statements

content control entries

control statements

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Which packet filtering statement is true?

Extended ACLs filter at Layer 3 only.

Extended ACLs filter at Layer 4 only.

Standard ACLs filter at Layer 3 only.

Standard ACLs filter at Layer 4 only.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Which statement about the operation of a standard ACL is incorrect?

If there are no matching ACEs in the ACL, the packet is forwarded because there is an implicit permit ACE automatically applied to all ACLs.

The router extracts the source IPv4 address from the packet header.

The router starts at the top of the ACL and compares the address to each ACE in sequential order.

When a match is made, the ACE either permits or denies the packet, and any remaining ACEs are not analyzed.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Which wildcard mask would permit all hosts from the 192.168.10.0/24 network?

0.0.0.0

0.0.0.31

0.0.0.255

0.0.255.255

255.255.255.255

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Which wildcard mask would permit all hosts?

0.0.0.0

0.0.0.31

0.0.0.255

0.0.255.255

255.255.255.255

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Which wildcard mask would permit only host 10.10.10.1?

0.0.0.0

0.0.0.31

0.0.0.255

0.0.255.255

255.255.255.255

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Which wildcard mask would permit only hosts from the 10.10.0.0/16 network?

0.0.0.0

0.0.0.31

0.0.0.255

0.0.255.255

255.255.255.255

Create a free account and access millions of resources

Create resources

Host any resource

Get auto-graded reports

Continue with Google

Continue with Email

Continue with Classlink

Continue with Clever

or continue with

Microsoft

Apple

Others

Already have an account?

Similar Resources on Wayground

40 questions

HTML CSS

Quiz

•

University

40 questions

SIA: Quiz 1 (Lesson 1-2)

Quiz

•

University

32 questions

Microsoft Excel - Formulae

Quiz

•

9th Grade - University

41 questions

L10 - ÔN TẬP KIỂM TRA GIỮA KỲ 1

Quiz

•

10th Grade - University

42 questions

COMPUTER NETWORKS [LEC] - UAC PREPARATION

Quiz

•

University

33 questions

Service Management Linux 9

Quiz

•

University

37 questions

ôn tập giữa kì 2 lớp 11

Quiz

•

11th Grade - University

32 questions

Process Synchronization Sec 05

Quiz

•

University

Popular Resources on Wayground

5 questions

This is not a...winter edition (Drawing game)

Quiz

•

1st - 5th Grade

15 questions

4:3 Model Multiplication of Decimals by Whole Numbers

Quiz

•

5th Grade

25 questions

Multiplication Facts

Quiz

•

5th Grade

10 questions

The Best Christmas Pageant Ever Chapters 1 & 2

Quiz

•

4th Grade

12 questions

Unit 4 Review Day

Quiz

•

3rd Grade

10 questions

Identify Iconic Christmas Movie Scenes

Interactive video

•

6th - 10th Grade

20 questions

Christmas Trivia

Quiz

•

6th - 8th Grade

18 questions

Kids Christmas Trivia

Quiz

•

KG - 5th Grade

Discover more resources for Computers

26 questions

Christmas Movie Trivia

Lesson

•

8th Grade - Professio...

7 questions

Different Types of Energy

Interactive video

•

4th Grade - University

20 questions

Slopes and Slope-Intercept Form

Quiz

•

8th Grade - University

7 questions

Force and Motion

Interactive video

•

4th Grade - University

7 questions

Biomolecules (Updated)

Interactive video

•

11th Grade - University

20 questions

Winter/Holiday Trivia

Quiz

•

KG - University

10 questions

WINTER WIN Time - ELA - 12/9/2025

Quiz

•

KG - University

7 questions

Human Impact on Resources

Interactive video

•

4th Grade - University

Module 4

37 questions

What are the permit or deny statements in an ACL called?

Which packet filtering statement is true?

Which statement about the operation of a standard ACL is incorrect?

Which wildcard mask would permit all hosts from the 192.168.10.0/24 network?

Which wildcard mask would permit all hosts?

Which wildcard mask would permit only host 10.10.10.1?

Which wildcard mask would permit only hosts from the 10.10.0.0/16 network?

How many total ACLs (both IPv4 and IPv6) can be configured on an interface?

Which of the following is an ACL best practice?

Where should a standard ACL be placed?

Create a free account and access millions of resources

Similar Resources on Wayground

Popular Resources on Wayground

Discover more resources for Computers