hardMultiple ChoiceObjective-mapped
350-701 Practice Question: Refer to the exhibit
Exhibit
interface GigabitEthernet0/0 ip address 10.1.1.1 255.255.255.0 ip access-group INBOUND in ! ip access-list extended INBOUND deny ip 10.0.0.0 0.255.255.255 any permit ip any any ! interface Serial0/0/0 ip address 172.16.1.1 255.255.255.252 ! router eigrp 100 network 10.1.1.0 0.0.0.255 network 172.16.1.0 0.0.0.3
Refer to the exhibit. An engineer has configured the ACL on the GigabitEthernet0/0 interface. Which of the following is true about the effect of this ACL?
⚠ Common exam trap
Cisco often tests the misconception that a single deny statement in an ACL blocks all traffic, when in fact the implicit permit any allows all other traffic unless a permit any is explicitly omitted or the ACL is applied in a way that triggers the implicit deny.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
It blocks traffic sourced from 10.0.0.0/8 entering G0/0, but allows other traffic.
The ACL is applied inbound on GigabitEthernet0/0 with a single deny statement for source IP 10.0.0.0/8. Since ACLs have an implicit deny any at the end, traffic from the 10.0.0.0/8 range is blocked, but all other IP traffic is implicitly permitted because the explicit deny only matches that source range. This makes option B correct.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
It blocks all IP traffic from entering G0/0 because of the deny statement.
Why it's wrong here
The permit any any allows all traffic that is not denied.
- ✓
It blocks traffic sourced from 10.0.0.0/8 entering G0/0, but allows other traffic.
Why this is correct
The deny statement blocks source 10.0.0.0/8, and the permit any any allows all else.
- ✗
It permits all traffic because the ACL is misconfigured.
Why it's wrong here
The ACL is correctly configured and will block traffic from 10.0.0.0/8.
- ✗
It blocks traffic destined to 10.0.0.0/8 entering G0/0, but allows other traffic.
Why it's wrong here
The ACL filters on source address, not destination.
Visual reference
Go deeper
Related to this question
About these practice questions
This 350-701 question is part of Courseiva's 978-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.