ACL questions test your ability to read, write, and place access lists correctly. They appear as configuration tasks, troubleshooting scenarios, and exhibit-based questions showing ACL output. The CCNA covers standard and extended ACLs for both IPv4 and IPv6.
Start Scenario PracticeYou are automating Cisco ASA firewall rule updates using the REST API. Which data format is required in the request body when pushing a new access control entry?
Explanation: Cisco ASA REST API integrations typically require JSON as the payload format for defining network objects and access rules.
You are parsing a complex JSON response from a Cisco ASA API call using the json.loads() method in Python. The response contains a nested list of access control entries. Which method is most efficient to extract all 'destination_ip' fields from every entry in the list?
Explanation: List comprehensions are the most Pythonic and efficient way to extract specific fields from a nested JSON list structure.
A network engineer is using the Cisco Firepower Management Center (FMC) API to retrieve access control policy information. Which HTTP method should be used to perform a read-only request for a specific policy resource?
Explanation: The GET method is the standard HTTP verb used to retrieve data from a REST API resource without modifying it.
You are automating Cisco Firepower policy deployment. After updating the Access Control Policy (ACP) via the API, you must initiate the deployment. Which API endpoint triggers the deployment task?
Explanation: The /api/fmc_config/v1/domain/{domainUUID}/deployment/deployabledevices endpoint is used to initiate the deployment process after changes are made.
You are using the Cisco Firepower Management Center (FMC) API to retrieve a list of Access Control Policies. Which URL endpoint is correct?
Explanation: The FMC API structure follows the /api/fmc_config/v1/domain/{domainUUID}/policy/accesspolicies path.
ACL questions test your ability to read, write, and place access lists correctly. They appear as configuration tasks, troubleshooting scenarios, and exhibit-based questions showing ACL output. The CCNA covers standard and extended ACLs for both IPv4 and IPv6. These appear throughout the SAUTO and require you to apply your knowledge, not just recall facts.
Cisco doesn't publish an exact breakdown, but scenario-based questions (especially exhibit and command-output formats) make up a significant portion of the SAUTO. Practicing each scenario type ensures you're ready for any format.
Yes. Courseiva provides free SAUTO scenario practice across all official exam domains. The platform includes scenario-based questions, command-output interpretation, topic-based practice, mock exams, and readiness tracking — no account required.
Launch a full Access Control List (ACL) Scenarios session with instant scoring and detailed explanations.
Start Scenario Practice →