Describe the Use and Configuration of ACLs NETWORKING-FOUNDATIONS Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the key difference between a standard and an extended ACL?

   • AStandard ACLs filter based on source IP address only; extended ACLs can filter based on source and destination IP, protocol, and port
   • BStandard ACLs are configured globally; extended ACLs are configured per interface
   • CStandard ACLs are used for routing; extended ACLs are used for switching
   • DStandard ACLs are applied to outbound traffic; extended ACLs are applied to inbound traffic
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which command creates a standard ACL on a Dell Networking device?

   • Aip access-list 10
   • Baccess-list 10 standard
   • Cstandard access-list 10
   • Dip access-list standard 10
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A network administrator is creating an extended ACL on a Dell Networking switch to block HTTP (TCP port 80) traffic from the 192.168.2.0/24 subnet to the web server 10.1.1.10, but allow HTTPS (TCP port 443) traffic from the same subnet to the same server. The administrator enters the following rules in order: 1. permit tcp 192.168.2.0/24 host 10.1.1.10 eq 443 2. deny tcp 192.168.2.0/24 host 10.1.1.10 eq 80 3. permit ip any any What is the result?

   • AAll traffic from 192.168.2.0/24 to 10.1.1.10 is blocked because the deny rule matches all traffic to the server.
   • BHTTPS is allowed, HTTP is blocked, and all other traffic is permitted.
   • CHTTP is blocked, but HTTPS is also blocked because the deny rule is evaluated before the permit rule.
   • DThe ACL is invalid because the deny rule must come before the permit rule.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   How does a Dell Networking device evaluate ACL rules?

   • AAll rules are evaluated, and the most specific rule wins
   • BIn reverse order, starting with the most specific rule
   • CIn the order they are configured, stopping at the first match
   • DRules are evaluated randomly to distribute load
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which command displays the configured rules of an ACL named 'BLOCK_HTTP' on a Dell Networking device?

   • Ashow access-group BLOCK_HTTP
   • Bshow ip access-lists BLOCK_HTTP
   • Cshow ip interface BLOCK_HTTP
   • Dshow running-config interface
   Reveal Solution Discussion Select an answer first