CCNA 2 Chapter 7

In which configuration would an outbound ACL placement be preferred over an inbound ACL placement?

• when a router has more than one ACL

• when the ACL is applied to an outbound interface to filter packets coming from multiple inbound interfaces before the packets exit the interface

• when an outbound ACL is closer to the source of the traffic flow

• when an interface is filtered by an outbound ACL and the network attached to the interface is the source network being filtered within the ACL

Which address is required in the command syntax of a standard ACL?

• source MAC address

• destination MAC address

• source IP address

• destination IP address

Which statement describes a difference between the operation of inbound and outbound ACLs?

• In contrast to outbound ALCs, inbound ACLs can be used to filter packets with multiple criteria.

• Inbound ACLs can be used in both routers and switches but outbound ACLs can be used only on routers.

• Inbound ACLs are processed before the packets are routed while outbound ACLs are processed after the routing is completed.

• On a network interface, more than one inbound ACL can be configured but only one outbound ACL can be configured.

What single access list statement matches all of the following networks?

192.168.16.0

192.168.17.0

192.168.18.0

192.168.19.0

• access-list 10 permit 192.168.16.0 0.0.3.255

• access-list 10 permit 192.168.16.0 0.0.0.255

• access-list 10 permit 192.168.16.0 0.0.15.255

• access-list 10 permit 192.168.0.0 0.0.15.255

A network administrator needs to configure a standard ACL so that only the workstation of the administrator with the IP address 192.168.15.23 can access the virtual terminal of the main router. Which two configuration commands can achieve the task? (Choose two.)

• Router1(config)# access-list 10 permit host 192.168.15.23

• Router1(config)# access-list 10 permit 192.168.15.23 0.0.0.255

• Router1(config)# access-list 10 permit 192.168.15.23 0.0.0.0

• Router1(config)# access-list 10 permit 192.168.15.23 255.255.255.0

• Router1(config)# access-list 10 permit 192.168.15.23 255.255.255.255

If a router has two interfaces and is routing both IPv4 and IPv6 traffic, how many ACLs could be created and applied to it?

• 4

• 6

• 8

• 12

Refer to the following output.

What is the significance of the 4 match(es) statement?

R1# <output omitted>

10 permit 192.168.1.56 0.0.0.7

20 permit 192.168.1.64 0.0.0.63 (4 match(es))

30 deny any (8 match(es))

• Four packets have been denied that have been sourced from any IP address.

• Four packets have been denied that are destined for the 192.168.1.64 network.

• Four packets have been allowed through the router from PCs in the network of 192.168.1.64

• Four packets have been allowed through the router to reach the destination network of 192.168.1.64/26.

On which router should the show access-lists command be executed?

• on the router that routes the packet referenced in the ACL to the final destination network

• on the router that routes the packet referenced in the ACL from the source network

• on any router through which the packet referenced in the ACL travels

• on the router that has the ACL configured

What is the quickest way to remove a single ACE from a named ACL?

• Use the no keyword and the sequence number of the ACE to be removed.

• Use the no access-list command to remove the entire ACL, then recreate it without the ACE.

• Copy the ACL into a text editor, remove the ACE, then copy the ACL back into the router.

• Create a new ACL with a different number and apply the new ACL to the router interface.

Which feature will require the use of a named standard ACL rather than a numbered standard ACL?

• the ability to filter traffic based on a specific protocol

• the ability to filter traffic based on an entire protocol suite and destination

• the ability to specify source and destination addresses to use when identifying traffic

• the ability to add additional ACEs in the middle of the ACL without deleting and re-creating the list