Question

113. Which wildcard mask would permit only hosts from the 10.10.0.0/16
network? a. 0.0.0.0
b. 0.0.0.31
c. 0.0.0.255
d. 0.0.255.255
e. 255.255.255.255
114. Which wildcard mask would permit all
hosts? a. 0.0.0.0
b. 0.0.0.31
c. 0.0.0.255
d. 0.0.255.255
e. 255.255.255.255
115. Which wildcard mask would permit all hosts from the 192.168.10.0/24
network? a. 0.0.0.0
b. 0.0.0.31
c. 0.0.0.255
d. 0.0.255.255
e. 255.255.255.255
116. What are the permit or deny statements in an ACL called?
a. access control entries
b. arbitrary statements
c. content control entries
d. control statements
117. Which packet filtering statement is true?
a. Extended ACLs filter at Layer 3 only.
b. Extended ACLs filter at Layer 4 only.
c. Standard ACLs filter at Layer 3 only.
d. Standard ACLs filter at Layer 4 only.
118. Which statement about the operation of a standard ACL is incorrect?
a. The router extracts the source IPv4 address from the packet header.
b. The router starts at the top of the ACL and compares the address to each ACE in sequential order.
c. When a match is made, the ACE either permits or denies the packet, and any remaining ACEs
are not analyzed.
d. If there are no matching ACEs in the ACL, the packet is forwarded because there is an implicit
permit ACE automatically applied to all ACLs.
119. How many total ACLs (both IPv4 and IPv6) can be configured on an interface?
a. 0
b. 1
c. 2
d. 4
e. 8
120. Which of the following is an ACL best practice?
a. Always test ACLs on a production network.
b. Create your ACLs on a production router.
c. Document the ACLs using the description ACL command.
d. Write the ACL before configuring it on a router.
121. Which ACL is capable of filtering based on TCP port number?03TruvidfullScreen
a. extended ACL
b. standard ACL
122. Which statement about ACLs is true?
a. Extended ACLs are numbered 1300 – 2699.
b. Named ACLs can be standard or extended.
c. Numbered ACLs is the preferred method to use when configuring ACLs.
d. Standard ACLs are numbered 1 – 199.
123. Where should a standard ACL be placed?
a. Standard ACL location is not important.
b. Standard ACLs should be placed as close to the destination as possible.
c. Standard ACLs should be placed as close to the source as possible.
d. Standard ACLs should be placed on serial interfaces.
124. Where should an extended ACL be placed?
a. Extended ACL location is not important.
b. Extended ACLs should be located as close to the destination as possible.
c. Extended ACLs should be located as close to the source as possible.
d. Extended ACLs should be located on serial interfaces

Answer 1

113. d (0.0.255.255)
/16 inverse wildcard = 0.0.255.255

114. e (255.255.255.255)
0.0.0.0 with wildcard 255.255.255.255 matches any host

115. c (0.0.0.255)
/24 inverse wildcard = 0.0.0.255

116. a (access control entries)

117. c (Standard ACLs filter at Layer 3 only)

118. d (If no matching ACEs, the packet is forwarded… — incorrect; there is an implicit deny)

119. d (4)
(one IPv4 ACL in each direction + one IPv6 ACL in each direction)

120. d (Write the ACL before configuring it on a router)

121. a (extended ACL)

122. b (Named ACLs can be standard or extended)

123. b (Standard ACLs should be placed as close to the destination as possible)

124. c (Extended ACLs should be located as close to the source as possible)