How does OS10 evaluate ACL rules when a packet matches multiple rules?

The rule with the highest priority number determines the action

The first matching rule in the ACL determines the action

All matching rules are combined to determine the action

The last matching rule in the ACL determines the action

An administrator applied an IP ACL named CORP-FILTER to interface ethernet1/1/1 on a Dell OS10 switch. After testing, the ACL is no longer needed on that interface. The administrator wants to remove the ACL from the interface while keeping the ACL configuration intact for future use. Which command accomplishes this?

no ip access-group CORP-FILTER in

ip access-group CORP-FILTER out

clear ip access-group CORP-FILTER

An administrator is troubleshooting why traffic from a specific host is being denied on a Dell OS10 switch. The ACL applied to the interface is named TROUBLE-ACL and contains the following rules in order: 1) deny ip any any, 2) permit tcp 10.0.0.0/8 any eq 80, 3) permit ip any any. The host at 10.1.1.1 is sending HTTP traffic to 192.168.1.1. Why is the traffic being denied?

Because the ACL is applied outbound, and the traffic is inbound.

Because rule 1 denies all IP traffic, and it is evaluated before the permit rules.

Because rule 2 only permits traffic to port 80, but the traffic is going to port 443.

Because rule 3 permits all traffic, but it is evaluated after the deny rule.

What happens to traffic that does not match any rule in an IP ACL in OS10?

It is denied due to the implicit deny rule

It is logged and then permitted

It is forwarded to the CPU for further processing

Dell PowerSwitch Data Center Deploy

Domain 5Objective 1

Configure and Verify ACLs in OS10 POWERSWITCH-DATA-CENTER-DEPLOY Practice Questions (Page 1)

Part of the Security domain, which accounts for 10% of the POWERSWITCH-DATA-CENTER-DEPLOY exam.

15questions here

3free pages

7concepts

10%of the exam

Questions 1–5

1foundation · easy
How does OS10 evaluate ACL rules when a packet matches multiple rules?
Select an answer first
2application · easy
An administrator applied an IP ACL named CORP-FILTER to interface ethernet1/1/1 on a Dell OS10 switch. After testing, the ACL is no longer needed on that interface. The administrator wants to remove the ACL from the interface while keeping the ACL configuration intact for future use. Which command accomplishes this?
Select an answer first
3application · medium
An administrator is troubleshooting why traffic from a specific host is being denied on a Dell OS10 switch. The ACL applied to the interface is named TROUBLE-ACL and contains the following rules in order: 1) deny ip any any, 2) permit tcp 10.0.0.0/8 any eq 80, 3) permit ip any any. The host at 10.1.1.1 is sending HTTP traffic to 192.168.1.1. Why is the traffic being denied?
Select an answer first
4foundation · easy
What happens to traffic that does not match any rule in an IP ACL in OS10?
Select an answer first
5foundation · easy
Which OS10 interface configuration command applies an ACL to a physical interface?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to POWERSWITCH-DATA-CENTER-DEPLOY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Dell Technologies. “POWERSWITCH-DATA-CENTER-DEPLOY” is a trademark of its owner, used for identification only.

Configure and Verify ACLs in OS10 POWERSWITCH-DATA-CENTER-DEPLOY Practice Questions (Page 1)

Questions 1–5

How does OS10 evaluate ACL rules when a packet matches multiple rules?

What happens to traffic that does not match any rule in an IP ACL in OS10?

Which OS10 interface configuration command applies an ACL to a physical interface?

Keep studying — Security