Courseiva
← 300-410
Full test
mediumMultiple ChoiceObjective-mapped

300-410 Practice Question: Consider the following partial configuration on…

Consider the following partial configuration on router R1: ```

interface GigabitEthernet0/1
 ip access-group MY_ACL in

!

ip access-list extended MY_ACL
 permit tcp 10.1.1.0 0.0.0.255 any eq 80
 permit icmp any any echo
 deny   ip any any

``` What is the effect of this ACL when applied inbound on GigabitEthernet0/1?

⚠ Common exam trap

Cisco often tests the distinction between ICMP Echo request and Echo reply, and the trap here is that the 'echo' keyword in an ACL permits only Echo requests, not all ICMP traffic or Echo replies.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

It permits HTTP requests from 10.1.1.0/24 and ICMP Echo requests from any source; all other IP traffic is denied.

The ACL is applied inbound on GigabitEthernet0/1. The first permit statement allows TCP traffic from source network 10.1.1.0/24 to any destination on port 80 (HTTP). The second permit statement allows ICMP Echo requests (type 8) from any source. The final deny statement blocks all other IP traffic. Therefore, only HTTP requests from 10.1.1.0/24 and ICMP Echo requests from any source are permitted; all other IP traffic is denied.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✓

    It permits HTTP requests from 10.1.1.0/24 and ICMP Echo requests from any source; all other IP traffic is denied.

    Why this is correct

    Correct. The ACL permits the specified traffic and denies all other IP traffic.

  • ✗

    It permits HTTP requests from 10.1.1.0/24 and all ICMP traffic; all other IP traffic is denied.

    Why it's wrong here

    Incorrect. Only ICMP Echo requests are permitted, not all ICMP types.

  • ✗

    It permits HTTP requests from any source to 10.1.1.0/24 and ICMP Echo requests; all other traffic is denied.

    Why it's wrong here

    Incorrect. The source is 10.1.1.0/24, not the destination.

  • ✗

    It permits HTTP requests from 10.1.1.0/24 and ICMP Echo replies; all other IP traffic is denied.

    Why it's wrong here

    Incorrect. The ACL permits ICMP Echo requests, not replies.

Visual reference

Source Router + ACL permit 10.0.0.0/8 deny any Server 10.0.0.5 ✓ 192.168.1.1 ✗ dropped ACLs evaluate top-down; first match wins — implicit deny all at end

About these practice questions

This 300-410 question is part of Courseiva's 1,966-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.