Which of the following is an ACL best practice?

Write the ACL before configuring it on a router.

Always test ACLs on a production network.

Create your ACLs on a production router.

Document the ACLs using the description ACL command.

Where should a standard ACL be placed?

Standard ACLs should be placed as close to the destination as possible.

Standard ACL location is not important.

Standard ACLs should be placed as close to the source as possible.

Standard ACLs should be placed on serial interfaces.

Where should an extended ACL be placed?

Extended ACLs should be located as close to the source as possible.

Extended ACL location is not important.

Extended ACLs should be located as close to the destination as possible.

Extended ACLs should be located on serial interfaces.

Which statement about ACLs is true?

Named ACLs can be standard or extended.

Extended ACLs are numbered 1300 – 2699.

Numbered ACLs is the preferred method to use when configuring ACLs.

Standard ACLs are numbered 1 – 199.

A network administrator is configuring an ACL to restrict access to certain servers in the data center. The intent is to apply the ACL to the interface connected to the data center LAN. What happens if the ACL is incorrectly applied to an interface in the inbound direction instead of the outbound direction?

The ACL does not perform as designed.

The ACL will analyze traffic after it is routed to the outbound interface.

If the provided ACEs are in the same ACL, which ACE should be listed first in the ACL according to best practice?

permit udp 172.16.0.0 0.0.255.255 host 172.16.1.5 eq snmptrap

deny udp any host 172.16.1.5 eq snmptrap

permit tcp 172.16.0.0 0.0.3.255 any established

In applying an ACL to a router interface, which traffic is designated as outbound?

traffic that is leaving the router and going toward the destination host

traffic for which the router can find no routing table entry

traffic that is coming from the source IP address into the router

traffic that is going from the destination IP address into the router

In which configuration would an outbound ACL placement be preferred over an inbound ACL placement?

When the ACL is applied to an outbound interface to filter packets coming from multiple inbound interfaces before the packets exit the interface

When a router has more than one ACL

When an interface is filtered by an outbound ACL and the network attached to the interface is the source network being filtered within the ACL

When an outbound ACL is closer to the source of the traffic flow

What single access list statement matches all of the following networks? 192.168.16.0 192.168.17.0 192.168.18.0 192.168.19.0

access-list 10 permit 192.168.16.0 0.0.3.255

access-list 10 permit 192.168.0.0 0.0.15.255

access-list 10 permit 192.168.16.0 0.0.0.255

access-list 10 permit 192.168.16.0 0.0.15.255

What two functions describe uses of access control lists? (Choose two.)

ACLs can control which areas a host can access on a network.

ACLs provide a basic level of security for network access.

ACLs assist a router in determining the best path to a destination.

Standard ACLs can filter traffic based on source and destination network addresses.

Standard ACLs can restrict access to specific applications and ports.

Which location is recommended for extended numbered or extended named ACLs?

a location as close to the source of traffic as possible

a location as close to the destination of traffic as possible

a location centered between traffic destinations and sources to filter as much traffic as possible

if using the established keyword, a location close to the destination to ensure that return traffic is allowed

Which scenario would cause an ACL misconfiguration and deny all traffic?

Apply an ACL that has all deny ACE statements.

Apply a named ACL to a VTY line.

Apply a standard ACL in the inbound direction.

Apply a standard ACL using the ip access-group outcommand.

Which statement describes a characteristic of standard IPv4 ACLs?

They filter traffic based on source IP addresses only.

They can be configured to filter traffic based on both source IP addresses and source ports.

They can be created with a number but not with a name.

They filter traffic based on destination IP addresses only.

Which three statements are best practices related to placement of ACLs? (Choose three.)

Filter unwanted traffic before it travels onto a low-bandwidth link.

Place extended ACLs close to the source IP address of the traffic.

Place standard ACLs close to the destination IP address of the traffic.

For every inbound ACL placed on an interface, ensure that there is a matching outbound ACL.

Place extended ACLs close to the destination IP address of the traffic.

Which three statements describe ACL processing of packets? (Choose three.)

A packet can either be rejected or forwarded as directed by the ACE that is matched.

An implicit deny any rejects any packet that does not match any ACE.

Each statement is checked only until a match is detected or until the end of the ACE list.

A packet that has been denied by one ACE can be permitted by a subsequent ACE.

Each packet is compared to the conditions of every ACE in the ACL before a forwarding decision is made.

Which three statements describe how an ACL processes packets? (Choose three.)

An implicit deny at the end of an ACL rejects any packet that does not match an ACE.

Each ACE is checked only until a match is detected or until the end of the ACL.

If an ACE is matched, the packet is either rejected or forwarded, as directed by the ACE.

A packet is compared with all ACEs in the ACL before a forwarding decision is made.

A packet that has been denied by one ACE can be permitted by a subsequent ACE.

Which two characteristics are shared by standard and extended ACLs? (Choose two.)

Both include an implicit deny as a final entry.

They can be created by using either descriptive names or numbers.

Both filter packets for a specific destination host IP address.

Both permit or deny specific services by port number.

They both filter based on protocol type.

Which two conditions would cause a router to drop a packet? (Choose two.)

No routing table entry exists for the packet destination, but the packet matches a permitted address in an outbound ACL.

The packet source address does not match the source as permitted in a standard inbound ACE.

No inbound ACL exists on the interface where the packet enters the router.

No outbound ACL exists on the interface where the packet exits the router.

The ACL that is affecting the packet does not contain at least one deny ACE.

Which two statement describes a difference between the operation of inbound and outbound ACLs? (Choose two.)

Inbound ACLs are processed before the packets are routed.

Outbound ACLs are processed after the routing is completed.

Inbound ACLs can be used in both routers and switches.

Multiple inbound ACLs can be applied to an interface.

Multiple outbound ACLs can be applied to an interface.

Which two statements describe appropriate general guidelines for configuring and applying ACLs? (Choose two.)

If an ACL contains no permit statements, all traffic is denied by default.

The most specific ACL statements should be entered first because of the top-down sequential nature of ACLs.

If a single ACL is to be applied to multiple interfaces, it must be configured with a unique number for each interface.

Multiple ACLs per protocol and per direction can be applied to an interface.

Standard ACLs are placed closest to the source, whereas extended ACLs are placed closest to the destination.

Module 4

University

•

37 Qs

Similar activities

CSCI0823 UnitTest_Finals

University

•

35 Qs

COMP_FUND_PROG-QUIZ #1

University

•

35 Qs

Basic Computer Concepts Quiz

University

•

40 Qs

Storage Area Networks module 1 & 2

University

•

34 Qs

Ôn Tập Chuong III - Tin 11

6th Grade - University

•

40 Qs

Topic 1 Introduction to Computer System

University

•

40 Qs

Компьютердик графика

7th Grade - University

•

40 Qs

ข้อสอบปลายภาควิชาพื้นฐานธุรกิจดิจิทัล 1/2564

University

•

40 Qs

Module 4

Quiz

•

Computers

•

University

•

Practice Problem

•

Medium

Ricky Zhanghao

Used 3+ times

FREE Resource

37 questions

Show all answers

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

What are the permit or deny statements in an ACL called?

access control entries

arbitrary statements

content control entries

control statements

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Which packet filtering statement is true?

Extended ACLs filter at Layer 3 only.

Extended ACLs filter at Layer 4 only.

Standard ACLs filter at Layer 3 only.

Standard ACLs filter at Layer 4 only.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Which statement about the operation of a standard ACL is incorrect?

If there are no matching ACEs in the ACL, the packet is forwarded because there is an implicit permit ACE automatically applied to all ACLs.

The router extracts the source IPv4 address from the packet header.

The router starts at the top of the ACL and compares the address to each ACE in sequential order.

When a match is made, the ACE either permits or denies the packet, and any remaining ACEs are not analyzed.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Which wildcard mask would permit all hosts from the 192.168.10.0/24 network?

0.0.0.0

0.0.0.31

0.0.0.255

0.0.255.255

255.255.255.255

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Which wildcard mask would permit all hosts?

0.0.0.0

0.0.0.31

0.0.0.255

0.0.255.255

255.255.255.255

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Which wildcard mask would permit only host 10.10.10.1?

0.0.0.0

0.0.0.31

0.0.0.255

0.0.255.255

255.255.255.255

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Which wildcard mask would permit only hosts from the 10.10.0.0/16 network?

0.0.0.0

0.0.0.31

0.0.0.255

0.0.255.255

255.255.255.255

Access all questions and much more by creating a free account

Create resources

Host any resource

Get auto-graded reports

Continue with Google

Continue with Email

Continue with Classlink

Continue with Clever

or continue with

Microsoft

Apple

Others

Already have an account?

Similar Resources on Wayground

40 questions

Introduction to Computer

Quiz

•

University

40 questions

ASSESSMENT 2: OVERVIEW OF ICT & REVIEW ON COMPUTER FUNDAMENTALS

Quiz

•

University

33 questions

Basic mechanism heat transfer

Quiz

•

University

34 questions

REDES TELEMÁTICAS-2020-II

Quiz

•

University

36 questions

Unit -3 cyber Ethics and Software

Quiz

•

10th Grade - University

34 questions

EL for Computers

Quiz

•

University

40 questions

Pre Test JNA Palopo

Quiz

•

10th Grade - Professi...

40 questions

Eng-103 Vocab1

Quiz

•

University

Popular Resources on Wayground

15 questions

Fractions on a Number Line

Quiz

•

3rd Grade

20 questions

Equivalent Fractions

Quiz

•

3rd Grade

25 questions

Multiplication Facts

Quiz

•

5th Grade

$fractions$

22 questions

fractions

Quiz

•

3rd Grade

20 questions

Main Idea and Details

Quiz

•

5th Grade

20 questions

Context Clues

Quiz

•

6th Grade

15 questions

Equivalent Fractions

Quiz

•

4th Grade

20 questions

Figurative Language Review

Quiz

•

6th Grade

Discover more resources for Computers

30 questions

Quiz 1 Review

Quiz

•

University

Module 4

37 questions

What are the permit or deny statements in an ACL called?

Which packet filtering statement is true?

Which statement about the operation of a standard ACL is incorrect?

Which wildcard mask would permit all hosts from the 192.168.10.0/24 network?

Which wildcard mask would permit all hosts?

Which wildcard mask would permit only host 10.10.10.1?

Which wildcard mask would permit only hosts from the 10.10.0.0/16 network?

How many total ACLs (both IPv4 and IPv6) can be configured on an interface?

Which of the following is an ACL best practice?

Where should a standard ACL be placed?

Access all questions and much more by creating a free account

Similar Resources on Wayground

Popular Resources on Wayground

Discover more resources for Computers