mediumMultiple SelectObjective-mapped
300-410 Practice Question: Which TWO configuration steps are required to…
Which TWO configuration steps are required to implement IPv6 traffic filtering using a named ACL on a Cisco router? (Choose TWO.)
⚠ Common exam trap
Cisco often tests the distinction between IPv4 and IPv6 ACL commands, and the trap here is that candidates mistakenly apply the IPv4 `ip access-group` command or the non-existent `ipv6 access-group` command instead of the correct `ipv6 traffic-filter` command.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create the ACL using the ipv6 access-list command.
The `ipv6 access-list` command is the standard Cisco IOS command used to create a named IPv6 ACL, which supports filtering based on IPv6 headers, extension headers, and upper-layer protocols. Option B is correct because the `ipv6 traffic-filter` command is the interface-level command that applies the named IPv6 ACL to filter inbound or outbound IPv6 traffic, analogous to `ip access-group` for IPv4.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Create the ACL using the ipv6 access-list command.
Why this is correct
Correct: 'ipv6 access-list NAME' enters IPv6 ACL configuration mode.
- ✓
Apply the ACL to the interface using the ipv6 traffic-filter command.
Why this is correct
Correct: 'ipv6 traffic-filter NAME in' or 'out' applies the ACL.
- ✗
Create the ACL using the access-list command.
Why it's wrong here
The 'access-list' command is for IPv4, not IPv6.
- ✗
Apply the ACL to the interface using the ip access-group command.
Why it's wrong here
The 'ip access-group' command is for IPv4 ACLs.
- ✗
Apply the ACL to the interface using the ipv6 access-group command.
Why it's wrong here
There is no 'ipv6 access-group' command; the correct command is 'ipv6 traffic-filter'.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 1,966 original 300-410 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.