cisco routing/swtiching essentials ch 7 exam

The ACL does not perform as designed.*

A network administrator is configuring an ACL to restrict access to certain servers in the data center. The intent is to apply the ACL to the interface connected to the data center LAN. What happens if the ACL is incorrectly applied to an interface in the inbound direction instead of the outbound direction?

Router1(config)# access-list 10 permit host 192.168.15.23* Router1(config)# access-list 10 permit 192.168.15.23 0.0.0.0*

A network administrator needs to configure a standard ACL so that only the workstation of the administrator with the IP address 192.168.15.23 can access the virtual terminal of the main router. Which two configuration commands can achieve the task?

R1(config-line)# access-class 1 in*

An administrator has configured an access list on R1 to allow SSH administrative access from host 172.16.1.100. Which command correctly applies the ACL?

Two devices were able to use SSH or Telnet to gain access to the router.*

Consider the following output for an ACL that has been applied to a router via the access-class in command. What can a network administrator determine from the output that is shown?R1# <output omitted> Standard IP access list 2 10 permit 192.168.10.0, wildcard bits 0.0.0.255 (2 matches) 20 deny any (1 match)

8

If a router has two interfaces and is routing both IPv4 and IPv6 traffic, how many ACLs could be created and applied to it?

when the ACL is applied to an outbound interface to filter packets coming from multiple inbound interfaces before the packets exit the interface*

In which configuration would an outbound ACL placement be preferred over an inbound ACL placement?

on the router that has the ACL configured*

On which router should the show access-lists command be executed?

The ACL will block all traffic.*

What is the effect of configuring an ACL with only ACEs that deny traffic?

Use the no keyword and the sequence number of the ACE to be removed.*

What is the quickest way to remove a single ACE from a named ACL?

access-list 10 permit 192.168.16.0 0.0.3.255*

What single access list statement matches all of the following networks? 192.168.16.0 192.168.17.0 192.168.18.0 192.168.19.0

when troubleshooting an ACL and needing to know how many packets matched*

When would a network administrator use the clear access-list counters command?

source IP address*

Which address is required in the command syntax of a standard ACL?

the ability to add additional ACEs in the middle of the ACL without deleting and re-creating the list*

Which feature will require the use of a named standard ACL rather than a numbered standard ACL?

Inbound ACLs are processed before the packets are routed while outbound ACLs are processed after the routing is completed.

Which statement describes a difference between the operation of inbound and outbound ACLs

Filter unwanted traffic before it travels onto a low-bandwidth link.* Place extended ACLs close to the source IP address of the traffic.* Place standard ACLs close to the destination IP address of the traffic.*

Which three statements are generally considered to be best practices in the placement of ACLs

An implicit deny any rejects any packet that does not match any ACE.* A packet can either be rejected or forwarded as directed by the ACE that is matched.* Each statement is checked only until a match is detected or until the end of the ACE list.*

Which three statements describe ACL processing of packets?

hosts

Which type of ACL statements are commonly reordered by the Cisco IOS as the first ACEs?

vty

Which type of router connection can be secured by the access-class command?