Question:You are filtering traffic to an FTP site and you want only FTP traffic to reach the server. You do
not want additional traffic to reach the server. Which traffic should be allowed?






[Click Here to Show Answer]



Answer: TCP on ports 20 and 21





[DONE]


Next Question

---

Question:Which access list type allows you to delete entries in a specific access list?





[Click Here to Show Answer]



Answer: Named





[DONE]


Next Question

---

Question:Which type of access list can filter based only on the source address of a packet?






[Click Here to Show Answer]



Answer: Standard





[DONE]


Next Question

---

Question:Which types of access lists can filter traffic based on the source port?






[Click Here to Show Answer]



AnswerExtended And Named





[DONE]


Next Question

---

Question:What are valid reasons to implement access lists?







[Click Here to Show Answer]



Answer:Priority queuing
Route filtering
Dial-on-demand routing





[DONE]


Next Question

---

Question:An administrator creates an access list prohibiting Telnet on his router. He then successfully
initiates a Telnet session from the router. What is the most likely reason the access list failed?







[Click Here to Show Answer]



Answer:The access list cannot stop the administrator's action.




[DONE]


Next Question

---

Question:When using access lists, it is important where those access lists are placed. Which statement best describes access list placement?






[Click Here to Show Answer]



Answer: Put standard access lists as near the destination as possible. Put extended access lists as close to the source as possible.




[DONE]


Next Question

---

Question:What do the following commands accomplish?


access-list 1 permit 172.16.0.0 0.0.255.255 interface ethernet 0
IP access-group 1 out
interface ethernet 1
IP access-group 1 out






[Click Here to Show Answer]



Answer: Only traffic from the source network 172.16.0.0 will be forwarded. Non-
172.16.0.0 network traffic is blocked.




[DONE]


Next Question

---

Question:In order to limit the quantity of numbers that a system administrator has to enter, Cisco can use which abbreviation to indicate 0.0.0.0?





[Click Here to Show Answer]



Answer: host



[DONE]


Next Question

---

Question:You are a system administrator and you want to deny access to a group of computers with addresses 172.30.16.0 to 172.30.31.0. Which wildcard mask would you use?





[Click Here to Show Answer]



Answer: 0.0.15.255



[DONE]


Next Question

---

Question:Cisco routers use wildcard masking to identify how to check or ignore corresponding IP address bits. What does setting a wildcard mask bit to 0 cause the router to do?





[Click Here to Show Answer]



Answer: It tells the router to check the corresponding bit value.



[DONE]


Next Question

---

Question:Access lists are numbered. Which of the following ranges could be used for an IP access list?





[Click Here to Show Answer]



Answer: 100 - 199
1 - 99



[DONE]


Next Question

---

Question:What do the following statements in an extended access list accomplish?


access-list 101 deny TCP 172.16.4.0 0.0.0.255 172.16.3.0 0.0.0.255 eq 21 access-list 101 deny TCP 172.16.4.0 0.0.0.255 172.16.3.0 0.0.0.255 eq 20 access-list 101 permit TCP 172.16.4.0 0.0.0.255 0.0.0.0 255.255.255.255





[Click Here to Show Answer]



Answer: This will block ftp traffic.


[DONE]


Next Question

---

Question:What do the following commands accomplish?


access-list 1 deny 172.16.4.0 0.0.0.255 access-list 1 permit any
interface ethernet 0
IP access-group 1 out





[Click Here to Show Answer]



Answer: This will block traffic from subnet 172.16.4.0 and allow all other traffic.


[DONE]


Next Question

---

Question:How many access lists are allowed per interface?




[Click Here to Show Answer]



Answer: One per port, per protocol


[DONE]


Next Question

---

Question:When using access lists, what does a Cisco router check first?




[Click Here to Show Answer]



Answer: To see if the packet is routable or bridgeable


[DONE]


Next Question

---

Question:What are the two types of access lists that can be configured on a Cisco router?




[Click Here to Show Answer]



Answer: A. Standard
B. Extended


[DONE]

---