300-410 IPv4 Access Control Lists • Complete Question Bank
Complete 300-410 IPv4 Access Control Lists question bank — all 0 questions with answers and detailed explanations.
A network engineer runs the following command on Router R1:
R1# show access-lists
Extended IP access list 101
10 permit tcp 192.168.1.0 0.0.0.255 any eq 80 (10 matches)
20 deny tcp any host 10.1.1.1 eq 22 (5 matches)
30 permit icmp any any (2 matches)
40 deny ip any any (1 match)Based on this output, which statement is correct?
A network engineer runs the following command on Router R1:
R1# show ip interface GigabitEthernet0/1
GigabitEthernet0/1 is up, line protocol is up Internet address is 10.1.1.1/24 Broadcast address is 255.255.255.255 Address determined by non-volatile memory MTU is 1500 bytes Helper address is not set Directed broadcast forwarding is disabled Outgoing access list is 101 Inbound access list is not set
Based on this output, which statement is correct?
A network engineer runs the following command on Router R1:
R1# show ip access-lists
Extended IP access list 120
10 permit tcp 10.0.0.0 0.255.255.255 any eq www (1000 matches)
20 permit udp any any eq dns (500 matches)
30 deny ip any any (200 matches)Based on this output, what is the problem?
A network engineer runs the following command on Router R1:
R1# show ip access-lists
Extended IP access list 130
10 deny ip 192.168.1.0 0.0.0.255 any (0 matches)
20 permit ip any any (1000 matches)Based on this output, which statement is correct?
A network engineer runs the following command on Router R1:
R1# show ip access-lists
Extended IP access list 140
10 deny tcp any host 10.1.1.1 eq 23 (15 matches)
20 permit tcp any host 10.1.1.1 eq 22 (20 matches)
30 permit ip any any (5 matches)Based on this output, what is the problem?
A network engineer runs the following command on Router R1:
R1# show ip access-lists
Extended IP access list 150
10 permit ip 10.0.0.0 0.255.255.255 any (500 matches)
20 deny ip any any (100 matches)Based on this output, which statement is correct?
A network engineer runs the following command on Router R1:
R1# show ip access-lists
Extended IP access list 160
10 permit tcp any any established (200 matches)
20 permit udp any any (100 matches)
30 deny ip any any (50 matches)Based on this output, what is the problem?
A network engineer runs the following command on Router R1:
R1# show ip access-lists
Extended IP access list 170
10 permit icmp any any echo (100 matches)
20 permit icmp any any echo-reply (80 matches)
30 deny ip any any (10 matches)Based on this output, which statement is correct?
A network engineer runs the following command on Router R1:
R1# show ip access-lists
Extended IP access list 180
10 permit tcp 192.168.1.0 0.0.0.255 any eq 80 (50 matches)
20 permit tcp 192.168.2.0 0.0.0.255 any eq 443 (30 matches)
30 deny ip any any (5 matches)Based on this output, what is the problem?
Consider the following partial configuration on router R1: ```
interface GigabitEthernet0/1 ip access-group MY_ACL in
!
ip access-list extended MY_ACL permit tcp 10.1.1.0 0.0.0.255 any eq 80 permit icmp any any echo deny ip any any
``` What is the effect of this ACL when applied inbound on GigabitEthernet0/1?
Examine the following configuration snippet: ```
interface GigabitEthernet0/0 ip access-group BLOCK_TELNET out
!
ip access-list extended BLOCK_TELNET deny tcp any any eq 23 permit ip any any
``` What is the effect of applying this ACL outbound on GigabitEthernet0/0?
Given the following configuration: ```
interface GigabitEthernet0/2 ip access-group FILTER_SSH in
!
ip access-list extended FILTER_SSH permit tcp any host 192.168.1.10 eq 22 permit udp any host 192.168.1.10 eq 22
``` What is the issue with this ACL?
Consider this configuration on router R2: ```
interface GigabitEthernet0/0 ip access-group RESTRICT_ACCESS in
!
ip access-list extended RESTRICT_ACCESS permit ip 10.0.0.0 0.255.255.255 any deny ip any any
``` What traffic will be permitted inbound on GigabitEthernet0/0?
Examine the following configuration: ```
interface GigabitEthernet0/3 ip access-group WEB_ONLY out
!
ip access-list extended WEB_ONLY permit tcp any any eq 80 permit tcp any any eq 443
``` What is the effect of this ACL when applied outbound on GigabitEthernet0/3?
Given this configuration: ```
interface GigabitEthernet0/4 ip access-group BLOCK_FTP in
!
ip access-list extended BLOCK_FTP deny tcp any any eq 21 deny tcp any any eq
20
permit ip any any
``` What is the effect of this ACL when applied inbound on GigabitEthernet0/4?
A network engineer runs the following command to troubleshoot an IPv4 Access Control Lists issue:
R1# debug ip packet 100 detail IP packet debugging is on for access list 100 *Mar 1 00:12:34.567: IP: s=10.1.1.1 (GigabitEthernet0/0), d=10.2.2.2, len 100, proto UDP, flags 0x0, sport 12345, dport 80, access list 100: matched line 10 permit udp host 10.1.1.1 host 10.2.2.2 eq 80 *Mar 1 00:12:35.123: IP: s=10.1.1.1 (GigabitEthernet0/0), d=10.2.2.2, len 100, proto TCP, flags 0x2, sport 12346, dport 443, access list 100: matched line 20 deny tcp host 10.1.1.1 host 10.2.2.2 eq 443 *Mar 1 00:12:35.124: IP: s=10.1.1.1 (GigabitEthernet0/0), d=10.2.2.2, len 100, proto TCP, flags 0x10, sport 12346, dport 443, access list 100: matched line 20 deny tcp host 10.1.1.1 host 10.2.2.2 eq 443
What does this output indicate?
A network engineer runs the following command to troubleshoot an IPv4 Access Control Lists issue:
R1# show ip access-lists 101
Extended IP access list 101
10 permit tcp 192.168.1.0 0.0.0.255 any eq 80 (12 matches)
20 deny tcp any any eq 443 (5 matches)
30 permit ip any any (100 matches)What does this output indicate?
A network engineer runs the following command to troubleshoot an IPv4 Access Control Lists issue:
R1# show ip interface GigabitEthernet0/0 | include access list
Outgoing access list is 102 Inbound access list is not set
Then the engineer checks:
R1# show ip access-lists 102
Extended IP access list 102
10 deny tcp any any eq 23
20 permit ip any anyWhat does this output indicate?
A network engineer runs the following command to troubleshoot an IPv4 Access Control Lists issue:
R1# debug ip packet 110 IP packet debugging is on for access list 110 *Mar 1 00:15:22.345: IP: s=10.1.1.1 (GigabitEthernet0/0), d=10.2.2.2, len 100, proto TCP, flags 0x2, sport 12345, dport 23, access list 110: matched line 10 deny tcp host 10.1.1.1 host 10.2.2.2 eq 23 *Mar 1 00:15:22.346: IP: s=10.1.1.1 (GigabitEthernet0/0), d=10.2.2.2, len 100, proto TCP, flags 0x10, sport 12345, dport 23, access list 110: matched line 10 deny tcp host 10.1.1.1 host 10.2.2.2 eq 23
What does this output indicate?
A network engineer runs the following command to troubleshoot an IPv4 Access Control Lists issue:
R1# show access-lists 120
Extended IP access list 120
10 permit tcp 192.168.1.0 0.0.0.255 any eq 80
20 permit tcp 192.168.2.0 0.0.0.255 any eq 443
30 deny ip any any logWhat does this output indicate?
A network engineer runs the following command to troubleshoot an IPv4 Access Control Lists issue:
R1# show ip access-lists 130
Extended IP access list 130
10 deny ip host 10.1.1.1 host 10.2.2.2
20 permit ip any anyThen the engineer runs:
R1# debug ip packet 130 IP packet debugging is on for access list 130 *Mar 1 00:20:10.123: IP: s=10.1.1.1 (GigabitEthernet0/0), d=10.2.2.2, len 100, proto ICMP, access list 130: matched line 10 deny ip host 10.1.1.1 host 10.2.2.2
What does this output indicate?
A network engineer runs the following command to troubleshoot an IPv4 Access Control Lists issue:
R1# show ip interface GigabitEthernet0/1 | include access list
Outgoing access list is 140 Inbound access list is not set
Then the engineer runs:
R1# show ip access-lists 140
Extended IP access list 140
10 deny icmp any any
20 permit ip any anyWhat does this output indicate?
A network engineer runs the following command to troubleshoot an IPv4 Access Control Lists issue:
R1# debug ip packet 150 IP packet debugging is on for access list 150 *Mar 1 00:25:45.678: IP: s=192.168.1.1 (GigabitEthernet0/0), d=10.1.1.1, len 100, proto UDP, flags 0x0, sport 12345, dport 53, access list 150: matched line 10 permit udp host 192.168.1.1 host 10.1.1.1 eq 53 *Mar 1 00:25:45.679: IP: s=192.168.1.1 (GigabitEthernet0/0), d=10.1.1.1, len 100, proto TCP, flags 0x2, sport 12346, dport 53, access list 150: matched line 20 permit tcp host 192.168.1.1 host 10.1.1.1 eq 53
What does this output indicate?
A network engineer runs the following command to troubleshoot an IPv4 Access Control Lists issue:
R1# show ip access-lists 160
Extended IP access list 160
10 permit tcp 10.0.0.0 0.255.255.255 any eq 22
20 permit tcp 172.16.0.0 0.15.255.255 any eq 22
30 permit tcp 192.168.0.0 0.0.255.255 any eq 22
40 deny ip any anyWhat does this output indicate?