CCNA Chapter 7

अब Quizwiz के साथ अपने होमवर्क और परीक्षाओं को एस करें!

If a router has two interfaces and is routing both IPv4 and IPv6 traffic, how many ACLs could be created and applied to it

8

atch each statement with the example subnet and wildcard that it describes.

92.168.15.65 255.255.255.240 ==> the first valid host address in a subnet192.168.15.144 0.0.0.15 ==> subnetwork address of a subnet with 14 valid host addreseshost 192.168.15.12 ==> all IP address bits must match exactly192.168.5.0 0.0.3.255 ==> hosts in a subnet with SM 255.255.252.0192.168.3.64 0.0.0.7 ==> address with a subnet 255.255.255.248

An ACL was configured on R1 with the intention of denying traffic from subnet 172.16.4.0/24 into subnet 172.16.3.0/24. All other traffic into subnet 172.16.3.0/24 should be permitted. This standard ACL was then applied outbound on interface Fa0/0. Which conclusion can be drawn from this configuration

All traffic will be blocked, not just traffic from the 172.16.4.0/24 subnet

4. Which three statements describe ACL processing of packets? (Choose three.)

An implicit deny any rejects any packet that does not match any ACE. A packet can either be rejected or forwarded as directed by the ACE that is matched. Each statement is checked only until a match is detected or until the end of the ACE list

Which three statements are generally considered to be best practices in the placement of ACLs?

Filter unwanted traffic before it travels onto a low-bandwidth link.* Place extended ACLs close to the source IP address of the traffic.* Place standard ACLs close to the destination IP address of the traffic.*

11. Refer to the following output. What is the significance of the 4 match(es) statement? R1# <output omitted>10 permit 192.168.1.56 0.0.0.720 permit 192.168.1.64 0.0.0.63 (4 match(es))30 deny any (8 match(es))

Four packets have been allowed through the router from PCs in the network of 192.168.1.64.

3. Which statement describes a difference between the operation of inbound and outbound ACLs

Inbound ACLs are processed before the packets are routed while outbound ACLs are processed after the routing is completed.

18. Refer to the exhibit. A router has an existing ACL that permits all traffic from the 172.16.0.0 network. The administrator attempts to add a new ACE to the ACL that denies packets from host 172.16.0.1 and receives the error message that is shown in the exhibit. What action can the administrator take to block packets from host 172.16.0.1 while still permitting all other traffic from the 172.16.0.0 network

Manually add the new deny ACE with a sequence number of 5.

15. An administrator has configured an access list on R1 to allow SSH administrative access from host 172.16.1.100. Which command correctly applies the ACL

R1(config-line)# access-class 1 in

A network administrator needs to configure a standard ACL so that only the workstation of the administrator with the IP address 192.168.15.23 can access the virtual terminal of the main router. Which two configuration commands can achieve the task?

Router1(config)# access-list 10 permit host 192.168.15.23* Router1(config)# access-list 10 permit 192.168.15.23 0.0.0.0

Refer to the exhibit. What will happen to the access list 10 ACEs if the router is rebooted before any other commands are implemented

The ACEs of access list 10 will be renumbered.

A network administrator is configuring an ACL to restrict access to certain servers in the data center. The intent is to apply the ACL to the interface connected to the data center LAN. What happens if the ACL is incorrectly applied to an interface in the inbound direction instead of the outbound direction

The ACL does not perform as designed

What is the effect of configuring an ACL with only ACEs that deny traffic?

The ACL will block all traffic.

Consider the following output for an ACL that has been applied to a router via the access-class in command. What can a network administrator determine from the output that is shown? R1# <output omitted>Standard IP access list 210 permit 192.168.10.0, wildcard bits 0.0.0.255 (2 matches)20 deny any (1 match)

Two devices were able to use SSH or Telnet to gain access to the router.

What is the quickest way to remove a single ACE from a named ACL

Use the no keyword and the sequence number of the ACE to be removed

Refer to the exhibit. Which command would be used in a standard ACL to allow only devices on the network attached to R2 G0/0 interface to access the networks attached to R1

access-list 1 permit 192.168.10.96 0.0.0.31

What single access list statement matches all of the following networks

access-list 10 permit 192.168.16.0 0.0.3.255

22. Which type of ACL statements are commonly reordered by the Cisco IOS as the first ACEs

host

n which router should the show access-lists command be executed

on the router that has the ACL configured

If the network administrator created a standard ACL that allows only devices that connect to the R2 G0/0 network access to the devices on the R1 G0/1 interface, how should the ACL be applied?

outbound on the R1 G0/1 interface

2. Which address is required in the command syntax of a standard ACL?

source IP address

14. Which feature will require the use of a named standard ACL rather than a numbered standard ACL

the ability to add additional ACEs in the middle of the ACL without deleting and re-creating the list

Which type of router connection can be secured by the access-class command

vty

1. In which configuration would an outbound ACL placement be preferred over an inbound ACL placement

when the ACL is applied to an outbound interface to filter packets coming from multiple inbound interfaces before the packets exit the interface*

When would a network administrator use the clear access-list counters command

when troubleshooting an ACL and needing to know how many packets matched


संबंधित स्टडी सेट्स

Ch 4 Sect. 3&4: Cell and Inheritance/ DNA Connection

View Set

Chapter 2 - Network Infrastructure and Documentation

View Set

Reading Assessment for Chapter 6

View Set

Φυσική Α' Γυμνασίου

View Set

French Unit 3 speaking/Conjugations/Culture

View Set

Bible (Route 66) - Unit 9 Review

View Set

Reproductive System Chapter 28 Mastering 28.3

View Set

Great 1 - U1 - Essential phrases - Hungarian

View Set