Access list Flashcards Preview

CCNA > Access list > Flashcards

Flashcards in Access list Deck (13)
Loading flashcards...
1
Q
Question 1
Which identification number is valid for an extended ACL?
A. 1 B. 64
C. 99 
D. 100 
E. 299 
F. 1099
A

Answer: D

2
Q

Question 2
Which statement about named ACLs is true?
A. They support standard and extended ACLs.
B. They are used to filter usernames and passwords for Telnet and SSH.
C. They are used to filter Layer 7 traffic.
D. They support standard ACLs only.
E. They are used to rate limit traffic destined to targeted networks.

A

Answer: A

3
Q
Question 3
Which range represents the standard access list?
A. 99 
B. 150 
C. 299 
D. 2000
A

Answer: A

4
Q
Question 4
A network engineer wants to allow a temporary entry for a remote user with a specific username and password so that the user can access the entire network over the internet. Which ACL can be used?
A. reflexive 
B. extended 
C. standard 
D. dynamic
A

Answer: D

5
Q

Question 5
Which statement about ACLs is true?
A. An ACL have must at least one permit action, else it just blocks all traffic.
B. ACLs go bottom-up through the entries looking for a match
C. An ACL has a an implicit permit at the end of ACL.
D. ACLs will check the packet against all entries looking for a match.

A

Answer: A

6
Q

Question 6
Which action can change the order of entries in a named access-list?
A. removing an entry
B. opening the access-list in notepad C. adding an entry
D. resequencing

A

Answer: D

7
Q
Question 7
Which of the following are the valid numbers of standard ACL? (Choose two)
A. 50 
B. 1550 
C. 150 
D. 1250 
E. 2050
A

Answer: A B

8
Q
Question 8
Host is able to ping a web server but it is not able to do HTTP request. What is the most likely cause the problem?
A. ACL blocking port 23 
B. ACL blocking all ports 
C. ACL blocking port 80 
D. ACL blocking port 443 
E. None of the above
A

Answer: C

9
Q

Question 9
Which item represents the standard IP ACL?
A. Access-list 110 permit any any
B. Access-list 50 deny 192.168.1.1 0.0.0.255
C. Access list 101 deny tvp any host 192.168.1.1
D. Access-list 2500 deny tcp any host 192.168.1.1 eq 22

A

Answer: B

10
Q
Question 10
While troubleshooting a connection problem on a computer, you determined that the computer can ping a specific web server but it cannot connect to TCP port 80 on that server. Which reason for the problem is most likely true?
A. A VLAN number is incorrect 
B. An ARP table entry is missing 
C. A route is missing 
D. An ACL is blocking the TCP port
A

Answer: D

11
Q

Question 11
Which command can you enter to block HTTPS traffic from the whole class A private network range to a host?
A. R1(config)#access-list 105 deny tcp 10.1.0.0 0.0.255.255 40.0.0.2 0.0.0.0 eq 443
B. R1(config)#access-list 105 deny tcp 10.1.0.0 0.0.255.255 40.0.0.2 0.0.0.0 eq 53
C. R1(config)#access-list 105 deny tcp 10.0.0.0 0.255.255.255 40.0.0.2 0.0.0.0 eq 53
D. R1(config)#access-list 105 deny tcp 10.0.0.0 0.255.255.255 40.0.0.2 0.0.0.0 eq 443

A

Answer: D

12
Q

QUESTION 92

An organization is concerned that too many employees are wasting company time accessing the Internet. Which access list statement would stop World Wide Web access for employees on the range of subnets from 172.16.8.0/24 to 172.16.11.0/24?

A. access-list 103 deny tcp 172.16.8.0 0.0.0.3 any eq 80

B. access-list 103 deny tcp 172.16.8.0 0.0.3.255 any eq 80

C. access-list 103 deny http 172.16.8.0 0.0.7.255 any

D. access-list 103 deny tcp any 172.16.8.0 0.0.3.255 eq 80

E. access-list 103 deny tcp 172.16.8.0 0.0.11.255 any eq 80

A

Hide Answer

Correct Answer: B

13
Q

A network engineer wants to allow a temporary entry for a remote user with a specific username and password so that the user can access the entire network over the Internet. Which ACL can be used?

A. standard

B. extended

C. dynamic

D. reflexive

A

Hide Answer

Correct Answer: C