Cisco CCNA Access Control Lists (ACLs) 2

Question 1

Which wildcard mask would match only the host 192.168.10.5?

Accepted Answer

0.0.0.0

Answer

A wildcard mask of 0.0.0.0 means all bits must match, which specifies a single host.

Question 2

Which ACL number range is used for extended IP ACLs?

Accepted Answer

100-199

Answer

Extended IP ACLs use the number range 100-199 (and 2000-2699 for expanded range).

Question 3

Where should an extended ACL be placed for optimal performance?

Accepted Answer

As close to the source as possible

Answer

Extended ACLs should be placed close to the source to stop unwanted traffic early and reduce unnecessary network load.

Question 4

What does the 'established' keyword do in an extended ACL?

Accepted Answer

Permits TCP packets with ACK or RST bits set

Answer

The 'established' keyword matches TCP segments that have the ACK or RST bit set, indicating an existing session.

Question 5

An administrator applies the command 'ip access-group 101 in' on an interface. What does this mean?

Accepted Answer

ACL 101 filters traffic entering the interface

Answer

The 'in' keyword applies the ACL to inbound traffic arriving on that interface.

Cisco CCNA Practice Test