Cisco CCNA Access Control Lists (ACLs) 4

Question 1

An ACL entry reads: 'permit ip 192.168.1.0 0.0.0.255 any'. What traffic does this permit?

Accepted Answer

All IP traffic from the 192.168.1.0/24 subnet to any destination

Answer

The source is 192.168.1.0/24 (wildcard 0.0.0.255) and the destination is 'any', permitting all IP traffic from that subnet.

Question 2

Which command removes a single entry from a named ACL?

Accepted Answer

no <sequence-number> inside the named ACL config mode

Answer

In named ACL configuration mode, typing 'no <sequence-number>' removes that specific entry.

Question 3

What is the default sequence number increment when adding ACL entries without specifying a sequence number?

Accepted Answer

10

Answer

Cisco IOS automatically assigns sequence numbers in increments of 10 (10, 20, 30…) for ACL entries.

Question 4

Which ACL type uses the 'evaluate' command to permit return traffic?

Accepted Answer

Reflexive ACL

Answer

Reflexive ACLs use 'ip reflexive-list timeout' and the 'evaluate' command to match dynamic return-traffic entries.

Question 5

A time-based ACL uses which command to reference a defined time range?

Accepted Answer

time-range <name>

Answer

The 'time-range ' command defines a time window, which is then referenced in an ACL entry with 'time-range '.

Cisco CCNA Practice Test