ACL Types & Classification 2

Question 1

Which ACL type filters traffic based solely on source IP address?

Accepted Answer

Standard ACL

Answer

Standard ACLs filter traffic using only the source IP address as the matching criterion.

Question 2

What is the number range for Cisco extended IP ACLs?

Accepted Answer

100–199

Answer

Cisco extended IP ACLs use numbers in the range 100–199 (and 2000–2699 for expanded range).

Question 3

A reflexive ACL is best described as which type?

Accepted Answer

A stateful ACL that automatically permits return traffic for established sessions

Answer

Reflexive ACLs create temporary dynamic entries that allow return traffic matching an established outbound session.

Question 4

Which classification describes an ACL that uses a name string instead of a number?

Accepted Answer

Named ACL

Answer

Named ACLs allow administrators to assign a descriptive string identifier rather than a numeric ID.

Question 5

Dynamic ACLs (lock-and-key) differ from standard ACLs because they:

Accepted Answer

Require user authentication before opening a temporary access hole

Answer

Dynamic (lock-and-key) ACLs open a temporary permit entry only after a user authenticates, typically via Telnet.

(ACL) Access Control Lists Practice Test