easyMultiple ChoiceObjective-mapped
300-410 Practice Question: Is true regarding the placement of an IPv4 ACL to…
Which of the following is true regarding the placement of an IPv4 ACL to filter traffic between two internal subnets?
⚠ Common exam trap
Cisco often tests the misconception that standard ACLs should be placed closest to the source (like extended ACLs), but the correct practice is to place standard ACLs closest to the destination due to their lack of destination-based filtering.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Standard ACLs should be placed closest to the destination.
Standard ACLs filter based solely on the source IP address and lack the granularity to distinguish between different destination subnets. Placing a standard ACL closest to the destination ensures that traffic is filtered only after it has reached the target subnet, preventing the ACL from inadvertently blocking traffic to other destinations that share the same source. This placement aligns with the Cisco best practice of placing standard ACLs near the destination to minimize unintended filtering.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Standard ACLs should be placed closest to the source.
Why it's wrong here
Standard ACLs filter only on source IP, so placing near destination avoids filtering unintended traffic.
- ✗
Extended ACLs should be placed closest to the destination.
Why it's wrong here
Extended ACLs filter on source and destination; placing near source saves bandwidth.
- ✓
Standard ACLs should be placed closest to the destination.
Why this is correct
Standard ACLs lack destination filtering; placing near destination prevents blocking traffic to other networks.
- ✗
Placement does not affect ACL functionality.
Why it's wrong here
Placement is critical for effective filtering and performance.
Visual reference
Go deeper
Related to this question
About these practice questions
This 300-410 question is part of Courseiva's 1,966-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.