WorksheetsLesson1&2_Quiz
Total questions: 35
Worksheet time: 3hrs 55mins
What is the primary function of Access Control Lists (ACLs)?
a) To enhance network speed
b) To control who can access different parts of a network
c) To create new IP addresses
d) To configure routers automatically
ACLs work like "guards" standing between hosts and allowing or stopping data
based on rules.
True
False
What is a key component of an ACL that defines its rules?
a) Interface types
d) Traffic flow direction
c) Router ports
b) Access Control Entries (ACEs)
ACLs applied to router interfaces are only effective in controlling inbound traffic.
True
False
What does the command "ACCESS-LIST 1 permit 192.168.1.1" do?
a) Denies access to the 192.168.1.1 IP address
b) Allows access from the 192.168.1.1 IP address
c) Blocks traffic from the 192.168.1.0/24 network
d) Configures a named ACL
In which range can you configure a standard numbered ACL?
a) 1 to 50
b) 100 to 199
c) 1 to 99 and 1300 to 1999
d) 2000 to 2999
In which range can you configure an extended numbered ACL?
a) 1 to 50
b) 100 to 199 and 2000 to 2699
c) 1 to 99 and 1300 to 1999
d) 2000 to 2999
If a packet matches a rule in an ACL, the router stops checking other
rules in that ACL.
True
False
You can configure both an inbound and an outbound ACL on the
same interface, but not two inbound or two outbound ACLs.
True
False
In an extended ACL, some protocols do not have a port name
assigned.
True
False
The access-list command access-list 250 deny 136.146.27.236
0.0.0.0 is written correctly
True
False
What is the main difference between standard ACLs and extended ACLs?
a) Extended ACLs can filter traffic based on protocols, ports, and both source and
destination IPs
b) Extended ACLs can only filter traffic based on source IP
c) Extended ACLs are faster than standard ACLs
d) Standard ACLs are more specific than extended ACLs
Extended ACLs allow you to block or permit traffic based on port numbers and
protocols.
True
False
With a standard ACL, you can block ICMP traffic while allowing HTTP and
HTTPS traffic.
True
False
Which of the following ports is used by HTTPS traffic?
25
443
80
123
What would happen if you mistakenly apply an extended ACL to the wrong
interface direction (e.g., inbound instead of outbound)?
a) The ACL would block all traffic
b) The ACL would not filter traffic correctly
c) The ACL would filter the same way regardless of the interface direction
d) The router would ignore the ACL
If you configure ACL 101 to block all traffic from 192.168.2.0/24 to 10.0.2.0/24,
HTTPS traffic will still be allowed.
True
False
When configuring an extended ACL to block specific traffic, what tool can you use
to see available protocol options while entering commands?
a) IP protocol list
b) The "?" command
c) Show protocol command
d) Help tab
The two ACEs
access-list 100 permit tcp 0.0.0.0 255.255.255.255 any eq 80
access-list 100 permit tcp any any eq 80
are considered identical.
True
False
Extended ACLs match based on the protocol, source address,
destination address, and port number. Their valid number ranges are
10-199 and 2000-2699
True
False
What type of packets will match the following ACL statement?
access-list 110 permit tcp 172.16.0.0 0.0.0.255 any eq 22
A) Any TCP traffic from the 172.16.0.0 network to any destination
network
B) Any TCP traffic from any host to the 172.16.0.0 network
C) SSH traffic from any source to the 172.16.0.0 network
D) SSH traffic from the 172.16.0.0 network to any destination network
Which statement correctly describes a characteristic of standard IPv4
ACLs?
A) They filter traffic based on both source IP addresses and source
ports
B) They can only be created using numbers, not names
C) They are configured in the interface configuration mode
D) They filter traffic based on source IP addresses only
What happens if an ACL is configured with only rules that deny
traffic?
A) The ACL will block all traffic
B) The ACL must be applied inbound only
C) The ACL must be applied outbound only
D) The ACL will allow any traffic that is not specifically denied
What is a key difference between inbound and outbound ACLs?
A) Inbound ACLs can filter packets using multiple criteria, but
outbound ACLs cannot
B) Inbound ACLs can be used on both routers and switches, while
outbound ACLs can only be used on routers
C) More than one inbound ACL can be configured on a single
interface, but only one outbound ACL can be applied
D) Inbound ACLs process packets before routing, while outbound
ACLs process packets after routing
Which command represents a standard IP access control list (ACL)?
A. access-list 2 permit host 10.0.0.2 any
B. access-list 50 deny 192.168.1.1 0.0.0.255
C. access-list 101 deny tcp any host 192.168.1.1
D. access-list 2500 deny tcp any host 192.168.1.1 eq 22
A network administrator enters the command R1(config)# access-list 1
permit 172.16.0.0 0.0.15.255. Which two IP addresses will match this
ACL? (Choose two.)
A. 172.16.16.12
B. 172.16.65.21
C. 172.16.0.255
D. 172.16.15.36
Which command is used to apply IP access list 10 to an interface for
incoming traffic?
A. ip access-group 10 in
B. ip access-list 10 in
C. ip access-group 10 out
D. ip access-list 10 out
What two ACEs could be used to deny IP traffic from a single source
host 10.1.1.1 to the 192.168.0.0/16 network? (Choose two.)
access-list 100 deny ip 10.1.1.1 255.255.255.255 192.168.0.0
0.0.255.255
access-list 100 deny ip 10.1.1.1 0.0.0.0 192.168.0.0 0.0.255.255
access-list 100 deny ip 192.168.0.0 0.0.255.255 host 10.1.1.1
access-list 100 deny ip host 10.1.1.1 192.168.0.0 0.0.255.255
access-list 100 deny ip 192.168.0.0 0.0.255.255 10.1.1.1 0.0.0.0
In applying an ACL to a router interface, which traffic is designated as
outbound?
traffic for which the router can find no routing table entry
traffic that is going from the destination IP address into the router
traffic that is leaving the router and going toward the destination host
traffic that is coming from the source IP address into the router
What type of packets will match the following ACL statement?
access-list 110 permit tcp 172.16.0.0 0.0.0.255 any eq 22
A) Any TCP traffic from the 172.16.0.0 network to any destination network
A) Any TCP traffic from any host to the 172.16.0.0 network
A) SSH traffic from any source to the 172.16.0.0 network
SSH traffic from the 172.16.0.0 network to any destination network
What is the purpose of this access list?
access-list 1 deny 172.16.36.236 0.0.0.0
access-list 1 permit 172.16.36.0 0.0.0.255
access-list 1 deny any
A. Block all traffic destined for the host 172.16.36.236 but allow all other traffic.
A. Block all traffic destined for the host 172.16.36.236 but allow traffic only within the 172.16.36.0 subnet.
A. Block all traffic originating from the host 172.16.36.236 but allow all other traffic.
Block all IP traffic originating from the host 172.16.36.236 but allow traffic only within the 172.16.36.0 subnet.
What does the command "ACCESS-LIST 1 permit 192.168.1.1" do?
a) Denies access to the 192.168.1.1 IP address
a) Allows access from the 192.168.1.1 IP address
a) Blocks traffic from the 192.168.1.0/24 network
Configures a named ACL
What would happen if you mistakenly apply an extended ACL to the wrong interface direction (e.g., inbound instead of outbound)?
a) The ACL would block all traffic
a) The ACL would not filter traffic correctly
a) The ACL would filter the same way regardless of the interface direction
The router would ignore the ACL
Which range represents all the IP addresses that are affected when network 10.120.160.0 with a wildcard mask of 0.0.7.255 is used in an ACE?
10.120.160.0 to 10.127.255.255
10.120.160.0 to 10.120.167.255
10.120.160.0 to 10.120.168.0
10.120.160.0 to 10.120.191.255
Which three commands will achieve this using best ACL placement practices? (Choose three.)
R2(config)# interface fastethernet 0/0
R2(config)# access-list 101 permit ip 192.168.1.0 255.255.255.0
R2(config)# access-list 101 permit ip host 192.168.1.1 host 192.168.2.1
R2(config-if)# ip access-group 101 in
R2(config)# access-list 101 permit ip any any
