ICND P2 V2 M6

Reviewed by Editorial Team
The ProProfs editorial team is comprised of experienced subject matter experts. They've collectively created over 10,000 quizzes and lessons, serving over 100 million users. Our team includes in-house content moderators and subject matter experts, as well as a global network of rigorously trained contributors. All adhere to our comprehensive editorial guidelines, ensuring the delivery of high-quality content.
Learn about Our Editorial Process
| By Asmt458
A
Asmt458
Community Contributor
Quizzes Created: 4 | Total Attempts: 555
| Attempts: 182
Quiz Flashcard
SettingsSettings
Please wait...
  • 1/13 Questions

    What is the term for the final default statement at the end of every ACL? (Source:Introducing ACL Operation)

    • Implicit deny any
    • Implicit deny host
    • Implicit permit any
    • Implicit permit host
Please wait...
ICND Quizzes & Trivia
About This Quiz

This quiz focuses on Access Control Lists (ACLs) in Cisco routers, covering operations, types, and configuration specifics, essential for CCNA certification.

Quiz Preview

  • 2. 

    What does a Cisco router do with a packet when it matches an ACL deny statement?(Source: Introducing ACL Operation)

    • Discards the packet

    • Returns the packet to its originator

    • Sends the packet to the output buffer

    • Holds the packet for further processing

    Correct Answer
    A. Discards the packet
    Explanation
    When a Cisco router matches an ACL (Access Control List) deny statement, it discards the packet. This means that the router will not forward the packet to its intended destination and will simply drop it. The router does not return the packet to its originator, send it to the output buffer, or hold it for further processing.

    Rate this question:

  • 3. 

    ACLs are processed from the top down. Which of the following is a benefit of placing more specific statements and statements that are expected to frequently match at the beginning of an ACL? (Source: Introducing ACL Operation)

    • Processing overhead is reduced.

    • ACLs can be used for other routers.

    • The ACLs are easier to edit.

    • The less specific tests can be inserted more easily.

    Correct Answer
    A. Processing overhead is reduced.
    Explanation
    Placing more specific statements and statements that are expected to frequently match at the beginning of an ACL reduces processing overhead. This is because ACLs are processed from the top down, so if a match is found early on, further processing can be skipped. By placing more specific and frequently matched statements at the beginning, the ACL can quickly determine if a packet matches those conditions and avoid unnecessary processing of the remaining statements. This improves efficiency and reduces the processing time required for each packet.

    Rate this question:

  • 4. 

    Which command is used to find out if ACL 100 has been configured on a Cisco router? (Source: Configuring and Troubleshooting ACLs)

    • Show interfaces

    • Show ip interface

    • Show ip access-list

    • Show access-groups

    Correct Answer
    A. Show ip access-list
    Explanation
    The command "show ip access-list" is used to find out if ACL 100 has been configured on a Cisco router. This command displays the configured access control lists (ACLs) on the router, allowing the user to verify if ACL 100 is present. The other commands listed do not provide information specifically related to ACL configuration.

    Rate this question:

  • 5. 

    What is the complete command to create an ACL entry that has the following parameters? (Source: Configuring and Troubleshooting A CLs) Source IP address is 172.16.0.0 • Source mask is 0.0.255.255 • Permit this entry • ACL number is 1

    • Access-list 1 deny 172.16.0.0 0.0.255.255

    • Access-list I permit 172.16.0.0 0.0.255.255

    • Access-list permit 1 172.16.0.0 255.255.0.0

    • Access-list 99 permit 172.16.0.0 0.0.255.255

    Correct Answer
    A. Access-list I permit 172.16.0.0 0.0.255.255
  • 6. 

    Which statement best describes the difference between standard and extended IPv4.(Source: Introducing ACL Operation)

    • Standard ACLs use the range 100 through 149, whereas extended ACLs use the range 150 through 199.

    • Standard ACLs filter based on the source and destination addresses, whereas extended ACLs filters based on the source address.

    • Standard ACLs permit or deny access to a specified well-known port, whereas extended ACLs filter based on the source address and mask.

    • Standard ACLs permit or deny the entire TCP/IP protocol suite, whereas extended ACLs can choose a specific IP protocol and port number,

    Correct Answer
    A. Standard ACLs permit or deny the entire TCP/IP protocol suite, whereas extended ACLs can choose a specific IP protocol and port number,
    Explanation
    Standard ACLs permit or deny the entire TCP/IP protocol suite, whereas extended ACLs can choose a specific IP protocol and port number. This means that standard ACLs can only filter traffic based on the source and destination IP addresses, while extended ACLs have the additional capability to filter based on the specific IP protocol and port number. This allows for more granular control over network traffic and the ability to define more specific access rules.

    Rate this question:

  • 7. 

    A system administrator wants to configure an IPv4 standard ACL on a Cisco router to allow packets only from the hosts on subnet 1 0. 1. 1 .0/24 to enter an interface on a router. Which ACL configuration accomplishes this goal? (Source: Configuring and Troubleshooting ACLs)

    • Access-list 1 permit 10.1.1.0

    • Access-list 1 permit 10.1.1.0 host

    • Access-list 99 permit 10.1.1.0 0.0.0.255

    • Access-list 100 permit 10.1.1.0 0.0.0.255

    Correct Answer
    A. Access-list 99 permit 10.1.1.0 0.0.0.255
    Explanation
    The correct answer is "access-list 99 permit 10.1.1.0 0.0.0.255". This ACL configuration allows packets from the hosts on subnet 10.1.1.0/24 to enter the interface on the router. The wildcard mask 0.0.0.255 specifies that all host bits in the source IP address should be matched exactly, while the network bits can be anything. This allows packets from any host within the subnet to be permitted. Access-list 1 permit 10.1.1.0 and access-list 1 permit 10.1.1.0 host are incorrect because they do not specify the wildcard mask, which is necessary for subnet matching. Access-list 100 is not relevant to the given requirement.

    Rate this question:

  • 8. 

    Which Cisco lOS command links an extended IPv4 ACL to an interface? (Source:Configuring and Troubleshooting ACLs)

    • Ip access-list 101 e0

    • Access-group 101 e0

    • Ip access-group 101 in

    • Access-list 101 permit tcp access-list 100 permit 10.1.1.0 0.0.0.255 eq 21

    Correct Answer
    A. Ip access-group 101 in
    Explanation
    The correct answer is "ip access-group 101 in". This command is used to link an extended IPv4 ACL (Access Control List) to an interface. By specifying "in", it means that the ACL will be applied to incoming traffic on the interface.

    Rate this question:

  • 9. 

    What does a Cisco router do with a packet when it matches an ACL permit statement?(Source: Introducing ACL Operation)

    • Discards the packet

    • Returns the packet to its originator

    • Sends the packet to the output buffer

    • Holds the packet for further processing

    Correct Answer
    A. Sends the packet to the output buffer
    Explanation
    When a Cisco router matches an ACL permit statement, it sends the packet to the output buffer. This means that the packet is not discarded, returned to its originator, or held for further processing. Instead, it is stored in the output buffer, which is a temporary storage area before the packet is transmitted out of the router. This allows the router to process other packets while waiting for the appropriate time to send the packet to its destination.

    Rate this question:

  • 10. 

    Which two ranges of numbers can you use to identify IPv4 extended ACLs on a Cisco router? (Choose two.) (Source: Introducing ACL Operation)

    • 1 to 99

    • 1300 to 1999

    • 100 to 199

    • 200 to 299

    • 2000 to 2699

    Correct Answer(s)
    A. 100 to 199
    A. 2000 to 2699
  • 11. 

    Which command applies standard IP ACL filtering to vty lines for an outgoing Telnet session that originates from within a router? (Source: Configuring and Troubleshooting ACLs)

    • Access-vtv 1 out

    • Access-class 1 out

    • Ip access-list I out

    • Ip access-group I out

    Correct Answer
    A. Access-class 1 out
    Explanation
    The correct answer is "access-class 1 out." This command is used to apply a standard IP ACL (Access Control List) filtering to vty lines for an outgoing Telnet session that originates from within a router. It specifies that ACL number 1 should be applied to outgoing traffic on the vty lines.

    Rate this question:

  • 12. 

    Which command is used on a Cisco router to determine if IP ACLs are applied to an Ethernet interface? (Source: Configuring and Troubleshooting ACLs)

    • Show interfaces

    • Show ACL

    • Show ip interface

    • Show ip access-list

    Correct Answer
    A. Show ip interface
    Explanation
    The "show ip interface" command is used on a Cisco router to determine if IP ACLs are applied to an Ethernet interface. This command will display the configuration and status of all IP interfaces on the router, including information about any applied ACLs. By using this command, network administrators can verify if the desired ACLs are correctly applied to the Ethernet interface and ensure proper network security.

    Rate this question:

  • 13. 

    The following is an ACL that is entered on a Cisco router. access-list 135 deny top 172.16.16.0 0.0.15.255 172.16.32.0 0.0.15.255 eq telnet access-list 135 permit ip any any If this ACL is used to control incoming packets on Ethernet 0, which three statements are true? (Choose three.) (Source: Configuring and Troubleshooting ACLs)

    • Address 172.16.1.1 will be denied Telnet access to address 172.16.37.5.

    • Address 172.16.31.1 will be permitted FTP access to address 172.16.45.1.

    • Address 172.16.1.1 will be permitted Telnet access to address 172.16.32.1.

    • Address 172.16.16.1 will be permitted Telnet access to address 172.16.32.1.

    • Address 172.16.16.1 will be permitted Telnet access to address 172.16.50.1.

    Correct Answer(s)
    A. Address 172.16.31.1 will be permitted FTP access to address 172.16.45.1.
    A. Address 172.16.1.1 will be permitted Telnet access to address 172.16.32.1.
    A. Address 172.16.16.1 will be permitted Telnet access to address 172.16.32.1.

Quiz Review Timeline (Updated): Mar 17, 2023 +

Our quizzes are rigorously reviewed, monitored and continuously updated by our expert board to maintain accuracy, relevance, and timeliness.

  • Current Version
  • Mar 17, 2023
    Quiz Edited by
    ProProfs Editorial Team
  • Feb 16, 2009
    Quiz Created by
    Asmt458

Related Topics

Back to Top Back to top
Advertisement