CISCO 3 - Module 4

Which wildcard mask would permit only host 10.10.10.1?

0.0.0.0

Which wildcard mask would permit all hosts from the 192.168.10.0/24 network?

0.0.0.255

Which wildcard mask would permit only hosts from the 10.10.10.0/16 network?

0.0.255.255

Which range represents all the IP addresses that are affected when network 10.120.160.0 with a wildcard mask of 0.0.7.255 is used in an ACE?

10.120.160.0 to 10.120.167.255

A network administrator configures an ACL with the command R1(config)# access-list 1 permit 172.16.0.0 0.0.15.255. Which 2 IP addresses will match this ACL statement?

172.16.0.255 172.16.15.36

Which wildcard mask would permit all hosts?

255.255.255.255

Which location is recommended for extended numbered or extended named ACLs?

A location as close to the source of traffic as possible.

What single access list statement matches all of the following networks? 192.168.16.0 192.168.17.0 192.168.18.0 192.168.19.0

Access-list 10 permit 192.168.16.0 0.0.3.25

Which scenario would cause an ACL misconfiguration and deny all traffic?

Apply an ACL that has all deny ACE statements.

Which operator is used in an ACL statement to match packets of a specific application?

Eq

Which ACL is capable of filtering based on TCP port number?

Extended ACL

Where should an extended ACL be placed ?

Extended ACLs should be located as close to the source as possible.

A college student is studying for the Cisco CCENT certification and is visualizing extended access lists. Which three keywords could immediately follow the keywords permit or deny as part of an extended access list?

Icmp, udp, & tcp

Which 2 statements describe appropriate general guidelines for configuring & applying ACLs?

If an ACL contains no permit statements, all traffic is denied by default The most specific ACLs statements should be entered 1st due to the top-down sequential nature of ACLs.

Which statement about the operation of a standard ACL is incorrect?

If there are no matching ACEs in the ACL, the packet is forwarded because there is an implicit permit ACE automatically applied to all ACLs.

What 2 conditions would cause a router to drop a packet?

No routing table entry exists for the packet destination but the packet matches a permitted address in an outbound ACL The packet source address does not match the source as permitted in a standard inbound ACL.

If the provided ACEs are in the same ACL, which ACE should be listed 1st in the ACL according to best practice?

Permit udp 172.16.0.0 0.0.255.255 host 172.16.1.5 eq snmptrap

When creating an ACL, which keyword should be used to document and interpret the purpose of the ACL statement in a Cisco device?

Remark

Which packet filtering statements are true?

Standard ACLs filter at the Layer 4 only

Where should a standard ACL be placed?

Standard ACLs should be placed as close to the destination as possible.

A network administrator is configuring an ACL to restrict access to certain servers in the data center. The intent is to apply the ACL to the interface connected to the data center LAN. What happens if the ACL is incorrectly applied to an interface in the inbound direction instead of the outbound direction?

The ACL does not perform as designed.

In applying an ACL to a router interface, which traffic is designated as the outbound?

Traffic that is leaving the router and going toward the destination host.

Which of the following is an ACL best practice?

Write the ACL before configuring it on a router.

Which 3 statements describe ACL processing of packets?

A packet can either be rejected or forwarded as directed by the ACE that is matched. Each statement is checked only until a match is detected or until the end of the ACE list. An implicit deny any rejects any packet that does not match any ACE.

What are the permit or deny statements in an ACL called?

Access control entries

Which statement about ACLs is true?

Named ACLs can be standard or extended