Timedora
Free Practice Quiz Question List

1 Access Control Lists Online Quiz Questions

Use this free practice quiz with 20 questions to review 1 Access Control Lists, test your knowledge, and prepare for your next test or exam.

20 questions
01
True or false
1 point

In an ACL wildcard mask, a 0 bit requires the corresponding address bit to match.

  1. A

    True

  2. B

    False

02
True or false
1 point

A standard ACL can distinguish packets by their destination IPv4 address.

  1. A

    True

  2. B

    False

03
Choose one
1 point

Which range is matched by the ACL address and wildcard pair 192.0.2.0 0.0.0.255?

  1. A

    Only 192.0.2.0

  2. B

    Addresses from 192.0.2.0 through 192.0.2.255

  3. C

    All addresses whose last octet is 255

  4. D

    Every IPv4 address

04
Choose one
1 point

A policy must permit TCP traffic from one subnet to one server only on a specified destination port. Which ACL type can match all these criteria?

  1. A

    Standard ACL

  2. B

    Extended ACL

  3. C

    Named ACL

  4. D

    Numbered ACL

05
Choose one
1 point

An ACL is applied inbound on an interface. When are packets checked by that ACL?

  1. A

    After the routing decision, as packets leave the interface

  2. B

    As packets arrive on the interface, before the routing decision

  3. C

    Only after packets reach their destination

  4. D

    Only when the ACL is first created

06
Choose all
1 point

Which actions help verify that an ACL is configured and affecting traffic as intended? Select all that apply.

  1. A

    Check only the ACL name

  2. B

    Inspect the entries and their order

  3. C

    Confirm the interface and direction where the ACL is applied

  4. D

    Test permitted and denied traffic and observe match counters

  5. E

    Assume the ACL is working if its commands were accepted

07
Choose all
1 point

Which statements correctly describe common ACL placement guidelines? Select all that apply.

  1. A

    Place extended ACLs near the source to stop unwanted traffic before it crosses the network

  2. B

    Place standard ACLs near the source because they can distinguish destinations

  3. C

    Place standard ACLs near the destination because they cannot distinguish destinations

  4. D

    Apply every ACL outbound regardless of the traffic path

08
Written response
1 point

What wildcard mask corresponds to the subnet mask 255.255.255.0? Enter the value in dotted-decimal notation.

09
Written response
1 point

In an extended TCP ACL entry where eq 443 follows the destination address, which port does 443 match?

10
Fill in the blank
1 point

ACL entries are checked from top to bottom, and the matching entry determines the result.

11
Fill in the blank
1 point

If no ACL entry matches a packet, the implicit at the end of the ACL denies it.

12
Open ended
1 point

An extended ACL first permits TCP from an allowed client subnet to a server on destination port 443, then denies all IP traffic to that server. What happens to an HTTPS packet from that subnet to the server, and why?

13
Choose one
1 point

In the example SERVER-HTTPS ACL, what happens to HTTP traffic from the client subnet to the specified server?

  1. A

    It is permitted by the final permit ip any any entry

  2. B

    It is denied by the implicit deny because no entry matches

  3. C

    It is denied by the explicit deny ip any host entry

  4. D

    It is permitted by the HTTPS entry

14
Choose one
1 point

An ACL has been defined but is not filtering traffic on any interface or other feature. What is needed for it to take effect?

  1. A

    Apply it to an interface or another feature that uses ACLs

  2. B

    Add an implicit deny entry manually

  3. C

    Run show access-lists once

  4. D

    Change every rule to an extended ACL

15
True or false
1 point

True or false: If a packet matches no entry in an ACL, it is denied by the implicit rule at the end.

  1. A

    True

  2. B

    False

16
Written response
1 point

In the ACL entry permit tcp 192.0.2.0 0.0.0.255 host 198.51.100.20 eq 443, what destination-port number is matched?

17
Choose one
1 point

A packet has been routed and is about to leave a router through an interface. Which direction keyword selects ACL processing as the packet leaves that interface?

  1. A

    in

  2. B

    out

  3. C

    permit

  4. D

    deny

18
Choose one
1 point

An operations team expects to identify and edit a particular ACL frequently. Which is a supported reason to choose a named ACL?

  1. A

    Named ACLs are required because numbered ACLs are unsupported.

  2. B

    Named ACLs automatically apply themselves to every interface.

  3. C

    A named ACL can make the list easier to identify and edit.

  4. D

    A named ACL always permits traffic that a numbered ACL would deny.

19
Choose one
1 point

An extended ACL entry permits TCP traffic from host 192.0.2.40 to host 198.51.100.53. The policy changes to permit UDP traffic between the same hosts. Which entry matches the new requirement?

  1. A

    permit udp host 192.0.2.40 host 198.51.100.53

  2. B

    permit tcp host 192.0.2.40 host 198.51.100.53

  3. C

    permit udp host 198.51.100.53 host 192.0.2.40

  4. D

    permit ip host 192.0.2.40 host 198.51.100.53

20
Written response
1 point

You need to create a named extended ACL called GUEST-DNS before adding its rules. What IOS-style command enters that ACL's configuration context?