Access List Questions
Question 1
Which one of the following statement is a standard access-list?
A. access-list 30 permit 10.2.0.0 0.0.255.255
B. access-list 100 permit ip 10.0.0.0 any
C. access-list 2710 deny udp host 172.16.1.1 any eq 50
D. access-list 101 deny tcp any any
Answer: A
Explanation
The standard access lists are ranged from 1 to 99 and from 1300 to 1999 so only access list 50 is a standard access list.
Question 2
Which two standard access-lists will allow traffic from networks 192.168.12.0, 192.168.13.0, 192.168.14.0 and 192.168.15.0? (Choose two)
A. access-list 45 192.168.12.0 0.0.1.255
B. access-list 45 192.168.14.0 0.0.1.255
C. access-list 45 192.168.12.0 0.0.0.255
D. access-list 45 192.168.13.0 0.0.0.255
E. access-list 45 192.168.14.0 0.0.3.255
Answer: A B
Question 3
Check the output below
| TUT_Router#show run <output omitted> access-list 200 permit ip 172.16.0.0 0.0.255.255 any eq www access-list 200 deny ip any any TUT_Router#show ip interface fa0/1 |
Which command will remove access-list 200 from interface Fa0/1?
A. TUT_Router(config-if)#no ip access-class 200 in
B. TUT_Router(config-if)#no ip access-class 200 out
C. TUT_Router(config-if)#no ip access-list 200 in
D. TUT_Router(config-if)#no ip access-list 200 out
E. TUT_Router(config-if)#no ip access-group 200 in
F. TUT_Router(config-if)#no ip access-group 200 out
Answer: F
Question 4
What parameters a standard access list uses to filter traffic? (Choose two)
A. source address
B. destination address
C. subnet mask
D. wildcard mask
Answer: A D
Question 5
You are working for the TECHTUT company. You are requested to block subnet 198.9.200.128/28 from accessing the resource, except the first and last IP. But the access-list must not prevent anyone else from using the resource. Given the following statements, please arrange them in the correct order:
1. permit 198.9.200.129
2. permit any
3. permit 198.9.200.142
4. deny 198.9.200.128 0.0.0.15
A. 2,3,1,4
B. 1,3,4,2
C. 1,2,3,4
D. 4,2,3,1
E. 4,1,2,3
Answer: B
Question 6
What of the following statements about using access list is true?
A. Only one access list per direction, per layer 3 protocol can be configured
B. More than one access list per direction, per layer 3 protocol can be configured
C. one access list per direction, per layer 2 protocol can be configured
D. More than one access list per direction, per layer 2 protocol can be configured
Answer: A
Explanation
We can have only 1 access list per protocol, per direction and per interface. It means:
+ We can not have 2 inbound access lists on an interface
+ We can have 1 inbound and 1 outbound access list on an interface
Question 7
What type of access list can be used to temporarily allow a user with a pre-defined username and password to access the network?
A. standard access-list
B. extended access-list
C. reflexive access-list
D. dynamic access-list
Answer: D
Explanation
We can use a dynamic access list to authenticate a remote user with a specific username and password. The authentication process is done by the router or a central access server such as a TACACS+ or RADIUS server. The configuration of dynamic ACL can be read here: http://www.cisco.com/en/US/tech/tk583/tk822/technologies_tech_note09186a0080094524.shtml