ZXCVBNM ##4

Which two conditions would cause a router to drop a packet? (Choose two.)

• • The ACL that is affecting the packet does not contain at least one deny ACE.

• • No routing table entry exists for the packet destination, but the packet matches a permitted address in an outbound ACL.

• • No outbound ACL exists on the interface where the packet exits the router.

• • No inbound ACL exists on the interface where the packet enters the router.

• • The packet source address does not match the source as permitted in a standard inbound ACE.

A network administrator configures an ACL with the command R1(config)# access-list 1 permit 172.16.0.0 0.0.15.255. Which two IP addresses will match this ACL statement? (Choose two.)

• • 172.16.16.12

• • 172.16.31.24

• • 172,16.65.21

• • 172.16.0.255

• • 172.16.15.36

Which two statements describe appropriate general guidelines for configuring and applying ACLs? (Choose two.)

• • Multiple ACLs per protocol and per direction can be applied to an interface.

• • If a single ACL is to be applied to multiple interfaces, it must be configured with a unique number for each interface.

• • The most specific ACL statements should be entered first because of the top-down sequential nature of ACLs.

• • If an ACL contains no permit statements, all traffic is denied by default.

• • Standard ACLs are placed closest to the source, whereas extended ACLs are placed closest to the destination.

What single access list statement matches all of the following networks?
192.168.16.0
192.168.17.0
192.168.18.0
192.168.19.0

• • access-list 10 permit 192.168.16.0 0.0.3.255

• • access-list 10 permit 192.168.0.0 0.0.15.255

• • access-list 10 permit 192.168.16.0 0.0.0.255

• • access-list 10 permit 192.168.16.0 0.0.15.255

Which three statements describe ACL processing of packets? (Choose three.)

• • A packet can either be rejected or forwarded as directed by the ACE that is matched.

• • A packet that does not match the conditions of any ACE will be forwarded by default.

• • Each statement is checked only until a match is detected or until the end of the ACE list.

• • Each packet is compared to the conditions of every ACE in the ACL before a forwarding decision is made.

• • An implicit deny any rejects any packet that does not match any ACE.

A network administrator is configuring an ACL to restrict access to certain servers in the data center. The intent is to apply the ACL to the interface connected to the data center LAN. What happens if the ACL is incorrectly applied to an interface in the inbound direction instead of the outbound direction?

• • All traffic is denied.

• • All traffic is permitted.

• • The ACL does not perform as designed.

• • The ACL will analyze traffic after it is routed to the outbound interface.

Which scenario would cause an ACL misconfiguration and deny all traffic?

• • Apply a standard ACL using the ip access-group outcommand.

• • Apply a named ACL to a VTY line.

• • Apply an ACL that has all deny ACE statements.

• • Apply a standard ACL in the inbound direction.

In applying an ACL to a router interface, which traffic is designated as outbound?

• • traffic that is leaving the router and going toward the destination host

• • traffic that is coming from the source IP address into the router

• • traffic for which the router can find no routing table entry

• • traffic that is going from the destination IP address into the router

When creating an ACL, which keyword should be used to document and interpret the purpose of the ACL statement on a Cisco device?​

• • remark

• • description

• • established

• eq

Which location is recommended for extended numbered or extended named ACLs?

• • a location as close to the destination of traffic as possible

• • a location as close to the source of traffic as possible

• • a location centered between traffic destinations and sources to filter as much traffic as possible

• • if using the established keyword, a location close to the destination to ensure that return traffic is allowed