Drag and drop each ACL type on the left to its matching capability on the right.
Drag a concept onto its matching description — or click a concept then click the description.
Filters based on source IP address only
Filters based on source/destination IP, protocol, and port numbers
Allows identification by alphanumeric name instead of number
Applies a time range to restrict access during specific periods
Authenticates a user and then opens a temporary hole in the firewall
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Standard ACL: Filters based on source IP address only
Standard ACLs filter only source IP; Extended ACLs filter source/dest IP, protocol, and ports; Named ACLs allow identification by name; Time-based ACLs use time ranges; Dynamic ACLs authenticate per-user.
Visual reference
About these practice questions
This 350-401 question is part of Courseiva's 1,175-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.