ENSA - Module 5 - ACL Configuration

Which two commands will configure a standard ACL? (Choose two.)

• access-list 40 permit host 172.16.20.25
• access-list 120 permit host 172.16.20.25
• access-list 10 permit 10.20.6.0 0.255.255.255 any
• access-list 20 permit 192.168.20.40 0.0.0.0
• access-list 15 permit host 192.168.50.26 any any

An administrator has configured an access list on R1 to allow SSH administrative access from host 172.16.1.100. Which command correctly applies the ACL?

• R1(config-line)# access-group 1 out
• R1(config-if)# access-class 1 in
• R1(config-line)# access-class 1 in
• R1(config-line)# access-group 1 in
• R1(config-if)# access-group 1 out

Refer to the exhibit. A network administrator is configuring a standard IPv4 ACL. What is the effect after the command no access-list 10 is entered?

• ACL 10 is disabled on F0/1
• ACL 10 is removed from the running configuration
• ACL 10 will be removed after the router R1 restarts
• Only the first the ACE 10 will be removed
• ACL 10 is removed from both the running configuration and the interface F0/1

Refer to the exhibit. A network administrator has configured ACL 15 as shown. Users on the 172.19.1.0 /24 network cannot forward traffic through router Router-B2-Floor1. What is the most likely cause of the traffic failure?

• The permit statement has a incorrect wildcard mask
• The established key word is not configured
• The interface has been incorrectly configured should be access-class
• The ACL should be an extended ACL
• The sequence of the ACEs is incorrect

A network administrator is writing a standard ACL that will deny any traffic from the 172.30.0.0/16 network, but permit all other traffic. Which two commands should be used? (Choose two.)

• # access-list 90 deny any
• # access-list 90 deny 172.30.0.0 0.0.255.255
• # access-list 90 permit any
• # access-list 90 host 172.30.0.0
• # access-list 90 deny 172.30.0.0 255.255.0.0

Refer to the exhibit. An ACL was configured on R1 with the intention of denying traffic from subnet 172.16.4.0/24 into subnet 172.16.3.0/24. All other traffic into subnet 172.16.3.0/24 should be permitted. This standard ACL was then applied outbound on interface Fa0/0. Which conclusion can be drawn from this configuration?​

• ACL should be applied outbound on all interfaces of R1
• An extended ACL must be used in this situation
• Only traffic from the 172.16.4.0 n=subnet is blocked and all other traffic is allowed
• All traffic will be blocked, not just the traffic from the 172.16.4.0 subnet
• Nothing wrong with the configuration

Refer to the exhibit. A network administrator needs to add an ACE to the FTP-CONTROL ACL that will deny IP traffic from the subnet 10.30.10.0/20. Which ACE will meet this requirement?

• 5 deny 10.30.10 0.0.15.255
• 15 deny 10.30.10 0.0.15.255
• 30 deny 10.30.10 0.0.15.255
• 5 deny 10.30.10 0.0.255.255
• 15 deny 10.30.10 0.0.255.255

A technician is tasked with using ACLs to secure a router. When would the technician use the ip access-group 199 in configuration option or command?

• to create an entry in a numbered ACL
• to apply an extended ACL to an interface
• to apply an ACL to all router interfaces
• to secure admin access to the router
• to apply a standard ACL to an interface

Refer to the exhibit. Which command would be used in a standard ACL to allow only devices on the network attached to R2 G0/0 interface to access the networks attached to R1?

• access-list 1 permit 192.168.10.101 0.0.0.0
• access-list 1 permit 192.168.10.0 0.0.0.255
• access-list 1 permit 192.168.10.128 0.0.0.63
• access-list 1 permit 192.168.10.0 0.0.0.0.63
• access-list 1 permit 192.168.10.96 0.0.0.31

Which statement describes a characteristic of standard IPv4 ACLs?

• They can be created with a number but not with a name
• They are configured under the interface configuration mode
• They filter traffic based on source IP addresses only
• Can only use numbers 100 to 199
• Can be configured to filter both IP addresses and Port numbers