Describe the Use and Configuration of ACLs NETWORKING-FOUNDATIONS Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What does a 'match' counter of 0 on an ACL rule indicate during troubleshooting?

   • AThe ACL is applied in the outbound direction
   • BThe rule is invalid and will be ignored
   • CThe rule is the last rule in the ACL
   • DNo packets have matched that rule since the counters were last cleared
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary purpose of an Access Control List (ACL) on a network device?

   • ATo prioritize traffic based on Quality of Service (QoS) markings
   • BTo filter traffic by matching packets against a set of rules
   • CTo translate private IP addresses to public IP addresses
   • DTo encrypt data transmitted between two sites
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A network administrator is configuring an extended ACL on a Dell Networking switch to block FTP (TCP ports 20 and 21) from the 192.168.3.0/24 subnet to the server 10.2.2.10, but allow all other traffic. The administrator enters the following rules in order: 1. deny tcp 192.168.3.0/24 host 10.2.2.10 range 20 21 2. permit ip any any What is the result?

   • AOnly FTP control traffic (port 21) is blocked, but FTP data traffic (port 20) is allowed.
   • BFTP traffic from 192.168.3.0/24 to 10.2.2.10 is blocked, and all other traffic is permitted.
   • CAll traffic from 192.168.3.0/24 to 10.2.2.10 is blocked, not just FTP.
   • DThe ACL is invalid because the 'range' keyword is not supported in extended ACLs.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A network administrator applied an extended ACL to the inbound direction of a Dell Networking switch interface. After applying the ACL, the administrator notices that traffic is not being filtered as expected. The administrator runs 'show access-lists' and sees that the match counters for the deny rules are not incrementing. What is the most likely cause?

   • AThe ACL is not applied to the correct interface or direction.
   • BThe ACL is missing a 'permit ip any any' rule at the end.
   • CThe ACL rules are in the wrong order.
   • DThe ACL is using the wrong protocol keyword.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Why is it important to place more specific ACL rules before more general ones?

   • ABecause specific rules are processed faster than general ones
   • BBecause the device sorts rules by specificity automatically
   • CBecause general rules are only evaluated if no specific rule matches
   • DBecause the first matching rule is applied, so specific rules must come first to be effective
   Reveal Solution Discussion Select an answer first