ACL Types & Classification 3

Question 1

Which ACL classification operates at Layer 3 and Layer 4 of the OSI model?

Accepted Answer

Extended ACL

Answer

Extended ACLs examine Layer 3 fields (IP addresses) and Layer 4 fields (TCP/UDP ports and flags) for filtering decisions.

Question 2

A VACL (VLAN Access Control List) differs from a router ACL in that it:

Accepted Answer

Can filter traffic within the same VLAN on a switch

Answer

VACLs (also called VLAN maps) can filter all traffic within a VLAN, including traffic that is switched and never routed.

Question 3

Which statement correctly distinguishes numbered from named ACLs?

Accepted Answer

Named ACLs allow individual entry deletion and descriptive labels; numbered ACLs traditionally require full replacement

Answer

Named ACLs allow you to delete individual sequence-numbered entries and use meaningful names, advantages not available in traditional numbered ACLs.

Question 4

An infrastructure ACL (iACL) is primarily used to:

Accepted Answer

Protect the network device's control plane from unauthorized access

Answer

Infrastructure ACLs protect router and switch management planes by permitting only legitimate management and routing protocol traffic to the device itself.

Question 5

Which ACL type would you use to filter Ethernet frames based on MAC address?

Accepted Answer

MAC ACL (EtherType ACL)

Answer

MAC ACLs (EtherType ACLs) operate at Layer 2 and match traffic based on source or destination MAC addresses.

(ACL) Access Control Lists Practice Test

(ACL) Access Control Lists Practice Test

ACL Types & Classification 3