ACL questions test your ability to read, write, and place access lists correctly. They appear as configuration tasks, troubleshooting scenarios, and exhibit-based questions showing ACL output. The CCNA covers standard and extended ACLs for both IPv4 and IPv6.
Start Scenario PracticeYou are automating Cisco ASA firewall rule updates using the REST API. Which data format is required in the request body when pushing a new access control entry?
Explanation: The Cisco ASA REST API requires request bodies to be formatted in JSON (JavaScript Object Notation). When pushing a new access control entry (ACE), you must send a JSON payload that defines the ACE parameters, such as source, destination, and action. This is specified in Cisco's ASA REST API documentation, which mandates JSON for all API interactions.
You are using the Cisco Firepower Management Center (FMC) API to retrieve a list of Access Control Policies. Which URL endpoint is correct?
Explanation: The correct FMC REST API endpoint for Access Control Policies is /api/fmc_config/v1/domain/{uuid}/policy/accesspolicies, where {uuid} is the domain UUID obtained from the platform info endpoint. This follows FMC's standard config API URL structure.
A network engineer is using the Cisco Firepower Management Center (FMC) API to retrieve access control policy information. Which HTTP method should be used to perform a read-only request for a specific policy resource?
Explanation: The HTTP GET method is defined for safe, read-only retrieval of a resource and is the correct method to fetch access control policy information from the FMC API. GET requests do not modify server state and are idempotent, making them ideal for querying a specific policy resource by its identifier. The FMC REST API follows standard REST conventions, so GET is used for all read operations.
A security engineer is automating Cisco Firepower Management Center (FMC) using its REST API. The script must create a new access control policy and then deploy it to managed devices. After creating the policy, the engineer attempts to deploy it but receives an HTTP 400 error stating 'Deployment failed: policy not associated with any device.' What is the most likely cause?
Explanation: The error 'policy not associated with any device' clearly indicates that the access control policy has not been assigned to any managed devices in FMC. Before deployment, policies must be associated with devices. This is a required step in the FMC workflow, and automating policy creation must include updating device assignments to avoid this error.
A security automation engineer is writing a Python script that uses the Cisco Firepower Management Center (FMC) REST API to modify an existing access control policy. The script must first obtain the current policy object, change its default action, and then submit the update. Which HTTP method and endpoint pattern should the script use to apply the change to the existing policy?
Explanation: To modify an existing access control policy in FMC, the REST API requires a PUT request to the specific policy resource, identified by its objectId in the URL. The request body must contain the complete policy object with the desired changes. POST is for creation, and PATCH is not supported for this resource, so those methods would not achieve the required update.
+1 more scenario questions available
Practice all Access Control List (ACL) ScenariosACL questions test your ability to read, write, and place access lists correctly. They appear as configuration tasks, troubleshooting scenarios, and exhibit-based questions showing ACL output. The CCNA covers standard and extended ACLs for both IPv4 and IPv6. These appear throughout the SAUTO and require you to apply your knowledge, not just recall facts.
Cisco doesn't publish an exact breakdown, but scenario-based questions (especially exhibit and command-output formats) make up a significant portion of the SAUTO. Practicing each scenario type ensures you're ready for any format.
Yes. Courseiva provides free SAUTO scenario practice across all official exam domains. The platform includes scenario-based questions, command-output interpretation, topic-based practice, mock exams, and readiness tracking — no account required.
Launch a full Access Control List (ACL) Scenarios session with instant scoring and detailed explanations.
Start Scenario Practice →