Objective 302.0

IPv4 Access Control Lists

300-410 Practice Questions

300-410 IPv4 Access Control Lists — Practice Questions

30 questions from this objective

Question 2mediummultiple choice

A network engineer runs the following command on Router R1:

R1# show access-lists

Extended IP access list 101

10 permit tcp 192.168.1.0 0.0.0.255 any eq 80 (10 matches)
    
20 deny tcp any host 10.1.1.1 eq 22 (5 matches)
    
30 permit icmp any any (2 matches)
    
40 deny ip any any (1 match)

Based on this output, which statement is correct?

Question 3easymultiple choice

Review the full routing breakdown →

A network engineer runs the following command on Router R1:

R1# show ip interface GigabitEthernet0/1

GigabitEthernet0/1 is up, line protocol is up Internet address is 10.1.1.1/24 Broadcast address is 255.255.255.255 Address determined by non-volatile memory MTU is 1500 bytes Helper address is not set Directed broadcast forwarding is disabled Outgoing access list is 101 Inbound access list is not set

Based on this output, which statement is correct?

Question 4mediummultiple choice

Read the full DNS explanation →

A network engineer runs the following command on Router R1:

R1# show ip access-lists

Extended IP access list 120

10 permit tcp 10.0.0.0 0.255.255.255 any eq www (1000 matches)
    
20 permit udp any any eq dns (500 matches)
    
30 deny ip any any (200 matches)

Based on this output, what is the problem?

Question 5easymultiple choice

Review the full routing breakdown →

A network engineer runs the following command on Router R1:

R1# show ip access-lists

Extended IP access list 130

10 deny ip 192.168.1.0 0.0.0.255 any (0 matches)
    
20 permit ip any any (1000 matches)

Based on this output, which statement is correct?

Question 6mediummultiple choice

Review the full routing breakdown →

A network engineer runs the following command on Router R1:

R1# show ip access-lists

Extended IP access list 140

10 deny tcp any host 10.1.1.1 eq 23 (15 matches)
    
20 permit tcp any host 10.1.1.1 eq 22 (20 matches)
    
30 permit ip any any (5 matches)

Based on this output, what is the problem?

Question 7easymultiple choice

Review the full routing breakdown →

A network engineer runs the following command on Router R1:

R1# show ip access-lists

Extended IP access list 150

10 permit ip 10.0.0.0 0.255.255.255 any (500 matches)
    
20 deny ip any any (100 matches)

Based on this output, which statement is correct?

Question 8hardmultiple choice

Review the full routing breakdown →

A network engineer runs the following command on Router R1:

R1# show ip access-lists

Extended IP access list 160

10 permit tcp any any established (200 matches)
    
20 permit udp any any (100 matches)
    
30 deny ip any any (50 matches)

Based on this output, what is the problem?

Question 9mediummultiple choice

Review the full routing breakdown →

A network engineer runs the following command on Router R1:

R1# show ip access-lists

Extended IP access list 170

10 permit icmp any any echo (100 matches)
    
20 permit icmp any any echo-reply (80 matches)
    
30 deny ip any any (10 matches)

Based on this output, which statement is correct?

Question 10mediummultiple choice

Review the full routing breakdown →

A network engineer runs the following command on Router R1:

R1# show ip access-lists

Extended IP access list 180

10 permit tcp 192.168.1.0 0.0.0.255 any eq 80 (50 matches)
    
20 permit tcp 192.168.2.0 0.0.0.255 any eq 443 (30 matches)
    
30 deny ip any any (5 matches)

Based on this output, what is the problem?

Question 11mediummultiple choice

IPv4 Access Control Lists

300-410 IPv4 Access Control Lists — Practice Questions

What is the default behavior of an IPv4 access control list (ACL) when no explicit permit or deny statement matches a packet?

In a standard IPv4 ACL, what is the range of valid numbers for the access-list number?

When using an extended ACL to filter traffic, which fields can be matched? (Choose the most complete answer.)

Which TWO commands verify the application and content of an IPv4 access control list on a Cisco IOS router? (Choose TWO.)

Which TWO statements about IPv4 extended access control lists are true? (Choose TWO.)

Which TWO configuration steps are required to apply an IPv4 extended access list to an interface in Cisco IOS? (Choose TWO.)

Which THREE symptoms indicate that an IPv4 access control list may be misconfigured or not applied correctly? (Choose THREE.)

Which THREE statements about IPv4 access control list sequence numbers are true? (Choose THREE.)

A large enterprise network uses EIGRP with route summarization. Router R1 has the following configuration: interface GigabitEthernet0/0, ip summary-address eigrp 100 10.0.0.0 255.255.252.0. Router R2 shows: show ip route eigrp includes 10.0.0.0/22 but not 10.0.3.0/24. What is the root cause?

A network redistributes OSPF into EIGRP. Router R1 has: redistribute ospf 1 metric 10000 100 255 1 1500. Router R2 shows: show ip route eigrp includes some OSPF routes but not 192.168.1.0/24. What is the root cause?

BGP is used between two ISPs. Router R1 has: neighbor 10.0.0.2 route-map SET-MED in, route-map SET-MED permit 10, set metric 50. Router R2 shows: show ip bgp 172.16.0.0 includes MED 50 but the path is not preferred. What is the root cause?

EIGRP network is experiencing stuck-in-active (SIA) routes. Router R1 shows: show ip eigrp topology active includes 10.0.0.0/24. Router R2 has: interface GigabitEthernet0/0, ip summary-address eigrp 100 10.0.0.0 255.255.255.0. What is the root cause?

DMVPN phase 2 network: spoke-to-spoke tunnels fail. Router Spoke1 has: tunnel source GigabitEthernet0/0, tunnel mode gre multipoint, ip nhrp network-id 1, ip nhrp nhs 10.0.0.1. Router Spoke2 shows: show dmvpn includes Spoke1 in NHRP cache but no spoke-to-spoke tunnel. What is the root cause?

MPLS network: LDP neighbors are down between R1 and R2. R1 shows: show mpls ldp neighbor includes nothing. R2 has: interface GigabitEthernet0/0, mpls ip, but R1 has no mpls ip on its interface. What is the root cause?

All 300-410 Objectives

IPv4 Access Control Lists

300-410 IPv4 Access Control Lists — Practice Questions

What is the default behavior of an IPv4 access control list (ACL) when no explicit permit or deny statement matches a packet?

In a standard IPv4 ACL, what is the range of valid numbers for the access-list number?

When using an extended ACL to filter traffic, which fields can be matched? (Choose the most complete answer.)

Which TWO commands verify the application and content of an IPv4 access control list on a Cisco IOS router? (Choose TWO.)

Which TWO statements about IPv4 extended access control lists are true? (Choose TWO.)

Which TWO configuration steps are required to apply an IPv4 extended access list to an interface in Cisco IOS? (Choose TWO.)

Which THREE symptoms indicate that an IPv4 access control list may be misconfigured or not applied correctly? (Choose THREE.)

Which THREE statements about IPv4 access control list sequence numbers are true? (Choose THREE.)

A large enterprise network uses EIGRP with route summarization. Router R1 has the following configuration: interface GigabitEthernet0/0, ip summary-address eigrp 100 10.0.0.0 255.255.252.0. Router R2 shows: show ip route eigrp includes 10.0.0.0/22 but not 10.0.3.0/24. What is the root cause?

A network redistributes OSPF into EIGRP. Router R1 has: redistribute ospf 1 metric 10000 100 255 1 1500. Router R2 shows: show ip route eigrp includes some OSPF routes but not 192.168.1.0/24. What is the root cause?

BGP is used between two ISPs. Router R1 has: neighbor 10.0.0.2 route-map SET-MED in, route-map SET-MED permit 10, set metric 50. Router R2 shows: show ip bgp 172.16.0.0 includes MED 50 but the path is not preferred. What is the root cause?

EIGRP network is experiencing stuck-in-active (SIA) routes. Router R1 shows: show ip eigrp topology active includes 10.0.0.0/24. Router R2 has: interface GigabitEthernet0/0, ip summary-address eigrp 100 10.0.0.0 255.255.255.0. What is the root cause?

DMVPN phase 2 network: spoke-to-spoke tunnels fail. Router Spoke1 has: tunnel source GigabitEthernet0/0, tunnel mode gre multipoint, ip nhrp network-id 1, ip nhrp nhs 10.0.0.1. Router Spoke2 shows: show dmvpn includes Spoke1 in NHRP cache but no spoke-to-spoke tunnel. What is the root cause?

MPLS network: LDP neighbors are down between R1 and R2. R1 shows: show mpls ldp neighbor includes nothing. R2 has: interface GigabitEthernet0/0, mpls ip, but R1 has no mpls ip on its interface. What is the root cause?

All 300-410 Objectives