Access Control List

Access Control List can be applied to:

• Interface

• NAT

• QoS

• VPN

ACLs on an Interface can be applied:

• Per Interface

• Per Direction

• Per Port

• Per Protocol

Standard ACLs should be placed closer to the ______.

• Source

• Hop

• Destination

• Interface

It is recommended to place Extended ACLs closer to the ___________.

• Destination

• Port

• Hop

• Source

TRUE or FALSE:

ACLs are Stateless while Firewalls are Stateful

• TRUE

• FALSE

If an Access Control List is applied to an Interface, it is also usually called as:

• Port Filter

• Packet Filter

• Packet Scanner

• Port Scanner

This is an example of:

• Standard Numbered ACL

• Extended Numbered ACL

• Standard Named ACL

• Extended Named ACL

This is an example of:

• Standard Numbered ACL

• Extended Numbered ACL

• Standard Named ACL

• Extended Named ACL

When creating an access-list, which of the following mask should you use to match all IPs for the CIDR block 10.10.1.0/24

• 255.255.255.0

• 0.0.0.255

• 255.0.0.0

• 0.0.255.0

Given this network diagram, if you are tasked to only block HTTP connection from Host A to IP 54.4.4.7, which of the following can you use?

• access-list 10 deny tcp host 10.0.0.11 host 54.4.4.7 eq 80

• access-list 101 deny tcp host 10.0.0.0 0.0.0.255 host 54.4.4.7 eq 80

• access-list 101 deny ip host 10.0.0.11 host 54.4.4.7 eq 80

• access-list 101 deny tcp host 10.0.0.11 host 54.4.4.7 eq www