Acl — Test 1

Correct Answer: B. B. Set of rules used for packet filtering
Explanation: An access control list is a set of confinements(rules), which can be configured in a router. These rules are defined to permit specific packets and to refuse particular packets at interface. ACL acts as a firewall at the router, which performs packet filtering.

Correct Answer: A. A. Number and name
Explanation: We can assign names that suits our list so that we can remember them easily. Also, these named access lists are convenient to edit. Numbered access lists have specific number range to use and entries in these lists can’t be deleted.

Correct Answer: C. C. Denying a service
Explanation: Standard access list can’t deny or allow a particular service from the host. It can deal with a host or network or sub-network only. An extended access list can contain restrictions for the services that belong to different port numbers in a host.

Correct Answer: D. D. Source ip address, protocol, port number and destination ip address
Explanation: In standard access list, only a destination IP address is used to filter, but in extended access list, source and destination IP address, protocol and port number are used. More specifications in packet filtering make extended access lists more sophisticated and advanced in security.

Correct Answer: B. B. False
Explanation: Each interface and protocol are allowed to have only one access list; also, multiple access lists for an interface causes ambiguity. But layer 2 devices can have multiple access lists for a single interface based on defined norms.

Correct Answer: A. A. It will allow all the packets into the network
Explanation: If there is no access list with the name that is assigned to the interface, then it can be considered as an empty access list. Empty access list clearly indicates that there are no restrictions on the packets. So, the interface will send all the packets into the network without restriction.

Correct Answer: C. C. 1 to 99 or 1300 to 1999
Explanation: Both ranges help to identify whether specific access list is standard or extended. Standard access lists can also be represented by names, but unlike named lists, numbered access lists do not support modification like edit, or delete in them.

Correct Answer: D. D. 100 to 199 or 2000 to 2699
Explanation: Given ranges will differ from numbered standard access list which has range from 1 to 99 or 1300 to 1999. Given ranges are used to distinguish the standard list and extended list.

Correct Answer: C. C. It speeds up the packet transmission
Explanation: An access list cannot speed up the packet transmission. An access list is nothing but a set of rules, which needs to be checked for a packet at the interface. So, the packet may take more time to be transmitted than usual time when it is subjected to checking.

Correct Answer: C. C. It can have 2 access lists on a layer 2 interface
Explanation: Port access control list can be configured on layer 2 devices. As layer 2 deals with MAC and IP addresses, port access list supports both MAC access list and IP access list. So, a single interface can have 2 access lists in layer 2. Ether-Channels cannot configure port access control lists.