Font size
S
M
L
XL
WorksheetsModule 4
Total questions: 37
Worksheet time: 19mins
Name
Class
Date
1.
What are the permit or deny statements in an ACL called?
a)
access control entries
b)
arbitrary statements
c)
content control entries
d)
control statements
2.
Which packet filtering statement is true?
a)
Extended ACLs filter at Layer 3 only.
b)
Extended ACLs filter at Layer 4 only.
c)
Standard ACLs filter at Layer 3 only.
d)
Standard ACLs filter at Layer 4 only.
3.
Which statement about the operation of a standard ACL is incorrect?
a)
If there are no matching ACEs in the ACL, the packet is forwarded because there is an implicit permit ACE automatically applied to all ACLs.
b)
The router extracts the source IPv4 address from the packet header.
c)
The router starts at the top of the ACL and compares the address to each ACE in sequential order.
d)
When a match is made, the ACE either permits or denies the packet, and any remaining ACEs are not analyzed.
4.
Which wildcard mask would permit all hosts from the 192.168.10.0/24 network?
a)
0.0.0.0
b)
0.0.0.31
c)
0.0.0.255
d)
0.0.255.255
e)
255.255.255.255
5.
Which wildcard mask would permit all hosts?
a)
0.0.0.0
b)
0.0.0.31
c)
0.0.0.255
d)
0.0.255.255
e)
255.255.255.255
6.
Which wildcard mask would permit only host 10.10.10.1?
a)
0.0.0.0
b)
0.0.0.31
c)
0.0.0.255
d)
0.0.255.255
e)
255.255.255.255
7.
Which wildcard mask would permit only hosts from the 10.10.0.0/16 network?
a)
0.0.0.0
b)
0.0.0.31
c)
0.0.0.255
d)
0.0.255.255
e)
255.255.255.255
8.
How many total ACLs (both IPv4 and IPv6) can be configured on an interface?
a)
0
b)
1
c)
2
d)
4
e)
8
9.
Which of the following is an ACL best practice?
a)
Always test ACLs on a production network.
b)
Create your ACLs on a production router.
c)
Document the ACLs using the description ACL command.
d)
Write the ACL before configuring it on a router.
10.
Where should a standard ACL be placed?
a)
Standard ACL location is not important.
b)
Standard ACLs should be placed as close to the destination as possible.
c)
Standard ACLs should be placed as close to the source as possible.
d)
Standard ACLs should be placed on serial interfaces.
11.
Where should an extended ACL be placed?
a)
Extended ACL location is not important.
b)
Extended ACLs should be located as close to the destination as possible.
c)
Extended ACLs should be located as close to the source as possible.
d)
Extended ACLs should be located on serial interfaces.
12.
Which ACL is capable of filtering based on TCP port number?
a)
extended ACL
b)
standard ACL
13.
Which statement about ACLs is true?
a)
Extended ACLs are numbered 1300 – 2699.
b)
Named ACLs can be standard or extended.
c)
Numbered ACLs is the preferred method to use when configuring ACLs.
d)
Standard ACLs are numbered 1 – 199.
14.
A college student is studying for the Cisco CCENT certification and is visualizing extended access lists. Which three keywords could immediately follow the keywords permit or deny as part of an extended access list? (Choose three.)
a)
ftp
b)
icmp
c)
tcp
d)
telnet
e)
udp
15.
A network administrator configures an ACL with the command R1(config)# access-list 1 permit 172.16.0.0 0.0.15.255. Which two IP addresses will match this ACL statement? (Choose two.)
a)
172.16.0.255
b)
172.16.15.36
c)
172.16.16.12
d)
172.16.31.24
e)
172.16.65.21
16.
A network administrator is configuring an ACL to restrict access to certain servers in the data center. The intent is to apply the ACL to the interface connected to the data center LAN. What happens if the ACL is incorrectly applied to an interface in the inbound direction instead of the outbound direction?
a)
All traffic is denied.
b)
All traffic is permitted.
c)
The ACL does not perform as designed.
d)
The ACL will analyze traffic after it is routed to the outbound interface.
17.
If the provided ACEs are in the same ACL, which ACE should be listed first in the ACL according to best practice?
a)
deny tcp any any eq telnet
b)
deny udp any host 172.16.1.5 eq snmptrap
c)
permit ip any any
d)
permit tcp 172.16.0.0 0.0.3.255 any established
e)
permit udp 172.16.0.0 0.0.255.255 host 172.16.1.5 eq snmptrap
18.
In applying an ACL to a router interface, which traffic is designated as outbound?
a)
traffic for which the router can find no routing table entry
b)
traffic that is coming from the source IP address into the router
c)
traffic that is going from the destination IP address into the router
d)
traffic that is leaving the router and going toward the destination host
19.
In which configuration would an outbound ACL placement be preferred over an inbound ACL placement?
a)
When a router has more than one ACL
b)
When an interface is filtered by an outbound ACL and the network attached to the interface is the source network being filtered within the ACL
c)
When an outbound ACL is closer to the source of the traffic flow
d)
When the ACL is applied to an outbound interface to filter packets coming from multiple inbound interfaces before the packets exit the interface
20.
What single access list statement matches all of the following networks?
192.168.16.0
192.168.17.0
192.168.18.0
192.168.19.0
a)
access-list 10 permit 192.168.0.0 0.0.15.255
b)
access-list 10 permit 192.168.16.0 0.0.0.255
c)
access-list 10 permit 192.168.16.0 0.0.3.255
d)
access-list 10 permit 192.168.16.0 0.0.15.255
21.
What two functions describe uses of access control lists? (Choose two.)
a)
ACLs assist a router in determining the best path to a destination.
b)
ACLs can control which areas a host can access on a network.
c)
ACLs provide a basic level of security for network access.
d)
Standard ACLs can filter traffic based on source and destination network addresses.
e)
Standard ACLs can restrict access to specific applications and ports.
22.
What type of ACL offers increased flexibility and control over network traffic?
a)
Extended
b)
Extensive
c)
Named standard
d)
Numbered standard
23.
What wildcard mask will match network 10.10.100.64/26?
a)
0.0.0.15
b)
0.0.0.31
c)
0.0.0.63
d)
0.0.0.127
24.
What wildcard mask will match networks 10.16.0.0 through 10.19.0.0?
a)
0.0.3.255
b)
0.0.255.255
c)
0.3.255.255
d)
0.252.255.255
25.
When creating an ACL, which keyword should be used to document and interpret the purpose of the ACL statement on a Cisco device?
a)
description
b)
eq
c)
established
d)
remark
26.
Which location is recommended for extended numbered or extended named ACLs?
a)
a location as close to the destination of traffic as possible
b)
a location as close to the source of traffic as possible
c)
a location centered between traffic destinations and sources to filter as much traffic as possible
d)
if using the established keyword, a location close to the destination to ensure that return traffic is allowed
27.
Which operator is used in an ACL statement to match packets of a specific application?
a)
eq
b)
established
c)
gt
d)
It
28.
Which range represents all the IP addresses that are affected when network 10.120.160.0 with a wildcard mask of 0.0.7.255 is used in an ACE?
a)
10.120.160.0 to 10.120.167.255
b)
10.120.160.0 to 10.120.168.0
c)
10.120.160.0 to 10.120.191.255
d)
10.120.160.0 to 10.127.255.255
29.
Which scenario would cause an ACL misconfiguration and deny all traffic?
a)
Apply a named ACL to a VTY line.
b)
Apply a standard ACL in the inbound direction.
c)
Apply a standard ACL using the ip access-group outcommand.
d)
Apply an ACL that has all deny ACE statements.
30.
Which statement describes a characteristic of standard IPv4 ACLs?
a)
They can be configured to filter traffic based on both source IP addresses and source ports.
b)
They can be created with a number but not with a name.
c)
They filter traffic based on destination IP addresses only.
d)
They filter traffic based on source IP addresses only.
31.
Which three statements are best practices related to placement of ACLs? (Choose three.)
a)
Filter unwanted traffic before it travels onto a low-bandwidth link.
b)
For every inbound ACL placed on an interface, ensure that there is a matching outbound ACL.
c)
Place extended ACLs close to the destination IP address of the traffic.
d)
Place extended ACLs close to the source IP address of the traffic.
e)
Place standard ACLs close to the destination IP address of the traffic.
32.
Which three statements describe ACL processing of packets? (Choose three.)
a)
A packet can either be rejected or forwarded as directed by the ACE that is matched.
b)
A packet that has been denied by one ACE can be permitted by a subsequent ACE.
c)
An implicit deny any rejects any packet that does not match any ACE.
d)
Each packet is compared to the conditions of every ACE in the ACL before a forwarding decision is made.
e)
Each statement is checked only until a match is detected or until the end of the ACE list.
33.
Which three statements describe how an ACL processes packets? (Choose three.)
a)
A packet is compared with all ACEs in the ACL before a forwarding decision is made.
b)
A packet that has been denied by one ACE can be permitted by a subsequent ACE.
c)
An implicit deny at the end of an ACL rejects any packet that does not match an ACE.
d)
Each ACE is checked only until a match is detected or until the end of the ACL.
e)
If an ACE is matched, the packet is either rejected or forwarded, as directed by the ACE.
34.
Which two characteristics are shared by standard and extended ACLs? (Choose two.)
a)
Both filter packets for a specific destination host IP address.
b)
Both include an implicit deny as a final entry.
c)
Both permit or deny specific services by port number.
d)
They both filter based on protocol type.
e)
They can be created by using either descriptive names or numbers.
35.
Which two conditions would cause a router to drop a packet? (Choose two.)
a)
No inbound ACL exists on the interface where the packet enters the router.
b)
No outbound ACL exists on the interface where the packet exits the router.
c)
No routing table entry exists for the packet destination, but the packet matches a permitted address in an outbound ACL.
d)
The ACL that is affecting the packet does not contain at least one deny ACE.
e)
The packet source address does not match the source as permitted in a standard inbound ACE.
36.
Which two statement describes a difference between the operation of inbound and outbound ACLs? (Choose two.)
a)
Inbound ACLs are processed before the packets are routed.
b)
Inbound ACLs can be used in both routers and switches.
c)
Multiple inbound ACLs can be applied to an interface.
d)
Multiple outbound ACLs can be applied to an interface.
e)
Outbound ACLs are processed after the routing is completed.
37.
Which two statements describe appropriate general guidelines for configuring and applying ACLs? (Choose two.)
a)
If a single ACL is to be applied to multiple interfaces, it must be configured with a unique number for each interface.
b)
If an ACL contains no permit statements, all traffic is denied by default.
c)
Multiple ACLs per protocol and per direction can be applied to an interface.
d)
Standard ACLs are placed closest to the source, whereas extended ACLs are placed closest to the destination.
e)
The most specific ACL statements should be entered first because of the top-down sequential nature of ACLs.
Reset
