Access Control Lists

Front 1

Are ACLs applied to inbound or outbound traffic?

Back 1

Either

Front 2

What are the 2 main types of ACLs?

Back 2

Standard and extended

Front 3

What is a standard ACL?

Back 3

An ACL that filters solely on source IP

Front 4

How many ACLs can be applied to an interface?

Back 4

1 per protocol per direction

Front 5

Can ACLs filter on traffic originating on the router the ACL is applied to?

Back 5

No

Front 6

Where should standard ACLs be placed?

Back 6

As close to the destination as possible

Front 7

Where should extended ACLs be placed?

Back 7

As close to the source as possible

Front 8

What two ranges can be used for standard ACLs?

Back 8

1-99 and 1300-1999

Front 9

What two ranges can be used for extended ACLs?

Back 9

100-199 and 2000-2699

Front 10

What is the command format for a standard numbered ACL?

Back 10

Access-list <#> {deny | permit } {any | host}

Front 11

What is wildcard masking used for?

Back 11

Specifying individual hosts or a range of hosts (like an inverse subnet mask)

Front 12

In wildcard masking, what does an octet of 0 match?

Back 12

Only the specific octet listed

Front 13

In wildcard masking, what does an octet of 255 match?

Back 13

Any octet value

Front 14

In wildcard masking, what number is assigned to match a network range?

Back 14

1 less than block size (e.g., .31 will add 32 addresses)

Front 15

What command will apply an ACL to an interface?

Back 15

Ip access-group <ACL #> { in | out }

Front 16

What command will apply an ACL to a vty line?

Back 16

Access-class <ACL #> in

Front 17

Do ACL remarks show up in running-config?

Back 17

Yes

Front 18

Do ACL remarks show up in show access-list?

Back 18

No

Front 19

What command will show all ACLs, even if they're not applied?

Back 19

Show access-lists

Front 20

What command shows the number of times a line in an ACL allowed or denied traffic?

Back 20

Show access-lists

Front 21

Does "show access-lists" indicate what interface an ACL is applied on?

Back 21

No

Front 22

What command will show IP access lists configured on the device?

Back 22

Show ip access-lists

Front 23

What two commands will show which ACLs are applied to which interfaces?

Back 23

Show ip interface and show running-config

Front 24

What command is used to create a named access list?

Back 24

Ip access-list {standard | extended} <name>

Front 25

Can numbered ACLs be modified?

Back 25

No

Front 26

Can named ACLs be modified?

Back 26

Yes

Front 27

Can switch ports have ACLs applied for incoming traffic?

Back 27

Yes

Front 28

Can switch ports have ACLs for outgoing traffic?

Back 28

No