ICND P2 V2 M6
ICND Part 2 Vol 2 Module 6
- 1.What does a Cisco router do with a packet when it matches an ACL permit statement?(Source: Introducing ACL Operation)
- A.
Discards the packet
- B.
Returns the packet to its originator
- C.
Sends the packet to the output buffer
- D.
Holds the packet for further processing
- 2.What does a Cisco router do with a packet when it matches an ACL deny statement?(Source: Introducing ACL Operation)
- A.
Discards the packet
- B.
Returns the packet to its originator
- C.
Sends the packet to the output buffer
- D.
Holds the packet for further processing
- 3.What is the term for the final default statement at the end of every ACL? (Source:Introducing ACL Operation)
- A.
Implicit deny any
- B.
Implicit deny host
- C.
Implicit permit any
- D.
Implicit permit host
- 4.Which statement best describes the difference between standard and extended IPv4.(Source: Introducing ACL Operation)
- A.
Standard ACLs use the range 100 through 149, whereas extended ACLs use the range 150 through 199.
- B.
Standard ACLs filter based on the source and destination addresses, whereas extended ACLs filters based on the source address.
- C.
Standard ACLs permit or deny access to a specified well-known port, whereas extended ACLs filter based on the source address and mask.
- D.
Standard ACLs permit or deny the entire TCP/IP protocol suite, whereas extended ACLs can choose a specific IP protocol and port number,
- 5.Which two ranges of numbers can you use to identify IPv4 extended ACLs on a Cisco router? (Choose two.) (Source: Introducing ACL Operation)
- A.
1 to 99
- B.
1300 to 1999
- C.
100 to 199
- D.
200 to 299
- E.
2000 to 2699
- 6.ACLs are processed from the top down. Which of the following is a benefit of placing more specific statements and statements that are expected to frequently match at the beginning of an ACL? (Source: Introducing ACL Operation)
- A.
Processing overhead is reduced.
- B.
ACLs can be used for other routers.
- C.
The ACLs are easier to edit.
- D.
The less specific tests can be inserted more easily.
- 7.A system administrator wants to configure an IPv4 standard ACL on a Cisco router to allow packets only from the hosts on subnet 1 0. 1. 1 .0/24 to enter an interface on a router. Which ACL configuration accomplishes this goal? (Source: Configuring and Troubleshooting ACLs)
- A.
Access-list 1 permit 10.1.1.0
- B.
Access-list 1 permit 10.1.1.0 host
- C.
Access-list 99 permit 10.1.1.0 0.0.0.255
- D.
Access-list 100 permit 10.1.1.0 0.0.0.255
- 8.Which Cisco lOS command links an extended IPv4 ACL to an interface? (Source:Configuring and Troubleshooting ACLs)
- A.
Ip access-list 101 e0
- B.
Access-group 101 e0
- C.
Ip access-group 101 in
- D.
Access-list 101 permit tcp access-list 100 permit 10.1.1.0 0.0.0.255 eq 21
- 9.What is the complete command to create an ACL entry that has the following parameters? (Source: Configuring and Troubleshooting A CLs) Source IP address is 172.16.0.0 • Source mask is 0.0.255.255 • Permit this entry • ACL number is 1
- A.
Access-list 1 deny 172.16.0.0 0.0.255.255
- B.
Access-list I permit 172.16.0.0 0.0.255.255
- C.
Access-list permit 1 172.16.0.0 255.255.0.0
- D.
Access-list 99 permit 172.16.0.0 0.0.255.255
- 10.The following is an ACL that is entered on a Cisco router. access-list 135 deny top 172.16.16.0 0.0.15.255 172.16.32.0 0.0.15.255 eq telnet access-list 135 permit ip any any If this ACL is used to control incoming packets on Ethernet 0, which three statements are true? (Choose three.) (Source: Configuring and Troubleshooting ACLs)
- A.
Address 172.16.1.1 will be denied Telnet access to address 172.16.37.5.
- B.
Address 172.16.31.1 will be permitted FTP access to address 172.16.45.1.
- C.
Address 172.16.1.1 will be permitted Telnet access to address 172.16.32.1.
- D.
Address 172.16.16.1 will be permitted Telnet access to address 172.16.32.1.
- E.
Address 172.16.16.1 will be permitted Telnet access to address 172.16.50.1.
- 11.Which command applies standard IP ACL filtering to vty lines for an outgoing Telnet session that originates from within a router? (Source: Configuring and Troubleshooting ACLs)
- A.
Access-vtv 1 out
- B.
Access-class 1 out
- C.
Ip access-list I out
- D.
Ip access-group I out
- 12.Which command is used on a Cisco router to determine if IP ACLs are applied to an Ethernet interface? (Source: Configuring and Troubleshooting ACLs)
- A.
Show interfaces
- B.
Show ACL
- C.
Show ip interface
- D.
Show ip access-list
- 13.Which command is used to find out if ACL 100 has been configured on a Cisco router? (Source: Configuring and Troubleshooting ACLs)
- A.
Show interfaces
- B.
Show ip interface
- C.
Show ip access-list
- D.
Show access-groups
Back to top