Which of the following is a common ACL configuration error that can cause traffic to be blocked unexpectedly?

Using a wildcard mask instead of a subnet mask

Forgetting to include an implicit deny at the end

Placing a more specific permit statement after a broad deny statement

Applying the ACL to the wrong interface but in the correct direction

Which IOS command correctly creates a standard ACL that permits traffic from the 192.168.1.0/24 network?

access-list 10 permit host 192.168.1.0

access-list 110 permit 192.168.1.0 0.0.0.255

access-list 10 permit 192.168.1.0 0.0.0.255

access-list 10 permit 192.168.1.0 255.255.255.0

Which command correctly creates an extended ACL entry that denies TCP traffic from any source to host 10.1.1.1 on port 80?

access-list 100 deny tcp host 10.1.1.1 any eq 80

access-list 100 deny tcp any host 10.1.1.1 eq 80

access-list 100 deny ip any host 10.1.1.1 eq 80

access-list 10 deny tcp any host 10.1.1.1 eq 80

Where should an extended ACL be placed to filter traffic coming from a specific source network before it enters the router?

On the interface closest to the destination, applied outbound

On any interface, applied outbound

On the interface closest to the source, applied inbound

On the interface closest to the source, applied outbound

CiscoCertified Network Associate (CCNA)

Domain 5Objective 6

5.6 Configure and Verify Access Control Lists 200-301 Practice Questions (Page 2)

Part of the Security Fundamentals domain, which accounts for 15% of the 200-301 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 14 practice questions to prepare you well beyond it. (estimate)

14questions here

3free pages

7concepts

15%of the exam

Questions 6–10

6foundation · easy
Which of the following is a common ACL configuration error that can cause traffic to be blocked unexpectedly?
Select an answer first
7foundation · easy
Which type of ACL can filter traffic based on both source and destination IP addresses?
Select an answer first
8foundation · easy
Which IOS command correctly creates a standard ACL that permits traffic from the 192.168.1.0/24 network?
Select an answer first
9foundation · easy
Which command correctly creates an extended ACL entry that denies TCP traffic from any source to host 10.1.1.1 on port 80?
Select an answer first
10foundation · easy
Where should an extended ACL be placed to filter traffic coming from a specific source network before it enters the router?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 200-301

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-301” is a trademark of its owner, used for identification only.