Disclaimer:
Educational Use Only:
The website links provided are to be used strictly for educational and knowledge-gaining purposes only.
No Misuse:
Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.
Respect for Websites and Businesses:
Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.
Acknowledge Value of Knowledge:
Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.
No Endorsement:
The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.
User Responsibility:
By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.
- Which of the following can be suited as a definition of an Access List?
a. Set of protocols to define traffic in a router
b. Set of rules used for packet filtering
c. Set of guidelines that every router should follow
d. Set of features that every router contains
Answer: bsanfoundry - Which of the following sets is used to identify Access Lists?
a. Number and name
b. Number and special characters
c. Names and binary numbers
d. Special character and binary numbers
Answer: asanfoundry - Which aspect can’t be managed by a standard access list?
a. Allowing a Network
b. Denying a sub-network
c. Denying a service
d. Allowing a host
Answer: csanfoundry - Which set of things will be taken into account to filter packets in an extended access list?
a. Source IP address and destination IP address
b. Source IP address, protocol and port number
c. Source IP address
d. Source IP address, protocol, port number, and destination IP address
Answer: dsanfoundry - One interface of a router can have multiple access lists.
a. True
b. False
Answer: bsanfoundry - What will happen if an empty access list is assigned to an interface?
a. It will allow all the packets into the network
b. It will deny all the packets from entering the network
c. It will allow only a few packets into the network
d. It does nothing
Answer: asanfoundry - What is the range of standard access list, if it is numbered?
a. 1 to 99
b. 99 to 199
c. 1 to 99 or 1300 to 1999
d. 99 to 199 or 2000 to 3000
Answer: csanfoundry - What is the range of numbered extended access list?
a. 1 to 99 or 1300 to 1999
b. 1 to 99 or 1300 to 2699
c. 100 to 199 or 1999 to 2699
d. 100 to 199 or 2000 to 2699
Answer: dsanfoundry - Which of the following cannot be an advantage of an access list?
a. It furnishes the security
b. It helps the network to perform well
c. It speeds up the packet transmission
d. It manages the traffic over the network
Answer: csanfoundry - What is the main advantage of Port Access Control List?
a. It is implemented on layer 3 devices
b. It supports outbound and inbound traffic
c. It can have 2 access lists on a layer 2 interface
d. It can be configured on Ether-Channel also
Answer: csanfoundry - In applying an ACL to a router interface, which traffic is designated as outbound?
a. Traffic that is coming from the source IP address into the router
b. Traffic that is going from the destination IP address into the router
c. Traffic that is leaving the router and going toward the destination host
d. Traffic for which the router can find no routing table entry
Answer: citexamanswers - What is the quickest way to remove a single ACE from a named ACL?
a. Use the no access-list command to remove the entire ACL, then recreate it without the ACE.
b. Copy the ACL into a text editor, remove the ACE, then copy the ACL back into the router.
c. Use the no keyword and the sequence number of the ACE to be removed.
d. Create a new ACL with a different number and apply the new ACL to the router interface.
Answer: citexamanswers - Which ICMP message type should be stopped inbound?
a. echo-reply
b. echo
c. source quench
d. unreachable
Answer: bitexamanswers - Which scenario would cause an ACL misconfiguration and deny all traffic?
a. Apply a standard ACL using the ip access-group out command.
b. Apply an ACL that has all deny ACE statements.
c. Apply a standard ACL in the inbound direction.
d. Apply a named ACL to a VTY line.
Answer: bitexamanswers - What is the main reason extended ACLs are more flexible than standard ACLs?
a. They allow filtering only by IP address.
b. They can filter by IP address, protocol, and port number.
c. They only work on inbound traffic.
d. They require less memory.
Answer: bitexamanswers+1 - Which method applies an IPv6 ACL to a router interface?
a. access-class
b. ipv6 traffic-filter
c. ip access-group
d. ipv6 access-list
Answer: bitexamanswers - Which operator is used in an ACL statement to match packets of a specific application?
a. established
b. gt
c. lt
d. eq
Answer: ditexamanswers - Which two keywords can be used in an access control list to replace a wildcard mask or address and wildcard mask pair?
a. some
b. any
c. gt
d. most
e. host
Answer: b, eitexamanswers - In an IPv6 ACL, what is generally allowed for proper neighbor discovery?
a. TCP packets only
b. UDP packets only
c. Neighbor discovery ICMP messages
d. ARP packets
Answer: citexamanswers - What wild card mask will match networks 172.16.0.0 through 172.19.0.0?
a. 0.0.3.255
b. 0.252.255.255
c. 0.3.255.255
d. 0.0.255.255
Answer: citexamanswers - What is the default action of an ACL if no permit statements are configured?
a. Permit everything
b. Deny everything
c. Permit inbound only
d. Permit outbound only
Answer: bitexamanswers - Where should standard ACLs be placed for best practice?
a. Closest to the source
b. Closest to the destination
c. On the router with least traffic
d. On the external interface only
Answer: bitexamanswers - Which statement is true about the top-down sequential nature of ACLs?
a. The last statement is always processed.
b. The most generic statements are entered first.
c. Once a match is found, the rest are ignored.
d. All entries are tested for each packet.
Answer: citexamanswers - What is a benefit of using named ACLs instead of numbered ACLs?
a. Can only be edited entirely
b. Can be easily edited and managed
c. Are only for IPv6
d. Require access to enable mode
Answer: bsanfoundry - Which type of access list is used to allow or deny a specific protocol?
a. Standard
b. Extended
c. Numbered
d. Named
Answer: bsanfoundry - Which command is used to apply a standard IPv4 ACL to an interface?
a. access-class
b. access-list
c. ip access-group
d. traffic-filter
Answer: citexamanswers - Which logical interface can you apply an ACL to on a router?
a. Physical only
b. Virtual only
c. Both physical and virtual
d. Only on VLAN interfaces
Answer: citexamanswers - What is the purpose of a wildcard mask in an ACL?
a. Identify routing protocols
b. Specify matching IP addresses
c. Encrypt packets
d. Assign priority to traffic
Answer: bitexamanswers - What is an Access Control Entry (ACE)?
a. A single rule in an ACL
b. The name of an ACL
c. An interface number
d. A type of protocol
Answer: aitexamanswers - What does the “permit” keyword do in an ACL statement?
a. Excludes specified traffic
b. Allows specified traffic through
c. Blocks all traffic
d. Requires authentication for traffic
Answer: bitexamanswers - What does the “deny” keyword do in an ACL statement?
a. Allows all specified traffic
b. Forwards traffic to upstream router
c. Blocks specified traffic
d. Authenticates specified traffic
Answer: citexamanswers - What happens if no traffic matches any ACE in an ACL?
a. Traffic is permitted by default
b. Traffic is denied by default
c. Traffic is logged by default
d. Traffic is forwarded to another ACL
Answer: bitexamanswers - What direction can an ACL be applied on an interface?
a. Only inbound
b. Only outbound
c. Either inbound or outbound
d. Both at the same time
Answer: citexamanswers - Which of these is an example of an extended ACL command?
a. access-list 10 permit 192.168.1.0 0.0.0.255
b. access-list 110 permit tcp 192.168.1.0 0.0.0.255 any eq 80
c. access-list 50 deny 10.0.0.0 0.255.255.255
d. access-list 90 permit any
Answer: bitexamanswers - Why might a wildcard mask of 0.0.0.255 be used in an ACL?
a. To match any host in a /25 network
b. To match any host in a /24 network
c. To match a single host
d. To match an entire class A network
Answer: bitexamanswers - Which rule is true concerning processing of ACLs?
a. Packets are compared to each line in order until a match is found
b. All lines are processed for each packet
c. ACLs are ignored if traffic is encrypted
d. Only permit statements are processed
Answer: aitexamanswers - Which ACL type is recommended for filtering traffic based on both source and destination IP address?
a. Standard
b. Numbered
c. Extended
d. Layer 2
Answer: csanfoundry+1 - What will be the effect of placing a standard ACL inbound on a router interface?
a. Only outbound packets will be filtered
b. Only inbound packets will be filtered
c. Both inbound and outbound will be filtered
d. No packets will be filtered
Answer: bitexamanswers - Which Cisco IOS command enters extended ACL configuration mode?
a. access-list
b. ip access-list extended
c. ipv6 access-list
d. access-class
Answer: bitexamanswers - Which ACL would you use to filter traffic from network 10.1.1.0/24 to only allow TCP port 80?
a. Extended
b. Standard
c. Dynamic
d. Reflexive
Answer: aitexamanswers - If no ACL is applied to an interface, what happens to traffic?
a. All traffic is allowed
b. All traffic is denied
c. Only internal traffic is allowed
d. Only external traffic is allowed
Answer: asanfoundry+1 - Which is a correct reason to use ACLs in network security?
a. To prevent unauthorized access
b. To speed up traffic
c. To allow more simultaneous connections
d. To monitor bandwidth usage
Answer: asanfoundry+1 - What would be the consequence of applying an ACL with only “deny” statements?
a. All traffic denied
b. Only specified traffic denied; rest allowed
c. Only specified traffic allowed
d. All traffic allowed
Answer: aitexamanswers - When configuring a named ACL, which keyword starts the configuration?
a. access-class
b. named
c. ip access-list
d. interface
Answer: citexamanswers - What does ICMP stand for, relevant to ACLs?
a. Internet Control Messaging Protocol
b. Internal Control Monitoring Protocol
c. Internal Connection Management Protocol
d. Internet Connection Messaging Protocol
Answer: aitexamanswers - Which is not a valid use case for ACLs?
a. Controlling remote access
b. Packet filtering
c. Rate-limiting traffic directly
d. Restricting network services
Answer: citexamanswers - Which type of ACL can match host, network, and port number?
a. Extended
b. Standard
c. Numbered
d. Named
Answer: asanfoundry+1 - What is the main benefit of ordering ACEs from most specific to least specific?
a. Ensures faster routing
b. Minimizes ACL length
c. Prevents unintended matches
d. Allows for wildcard masks
Answer: citexamanswers - Which protocol can be explicitly allowed or denied by an extended ACL?
a. ICMP
b. TCP
c. UDP
d. All of the above
Answer: ditexamanswers - What is the implicit last statement in every ACL?
a. permit all
b. deny all
c. permit IP any any
d. log all
Answer: bitexamanswers
