Courseiva
easyMultiple SelectObjective-mapped

350-401 Practice Question: Which three statements about named ACLs and their…

Which three statements about named ACLs and their configuration are true? (Choose three.)

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Named ACLs can be either standard or extended.

Named ACLs can be standard or extended (A). They allow individual entries to be added, removed, or reordered using sequence numbers (B). They are applied to interfaces using the 'ip access-group' command with the 'in' or 'out' keyword (E). Option C is false: named ACLs are created with 'ip access-list' in global config to enter the ACL sub-configuration mode, but the ACL entries themselves are not entered in global config mode. Option D is false because named ACLs do not automatically renumber.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Named ACLs can be either standard or extended.

    Why this is correct

    Named ACLs support both standard and extended types.

  • Named ACLs allow individual entries to be added, removed, or reordered using sequence numbers.

    Why this is correct

    Sequence numbers allow adding, removing, or reordering entries.

  • Named ACLs are entered in global configuration mode using the 'ip access-list' command.

    Why it's wrong here

    Named ACLs require entering ACL sub-configuration mode; entries are not directly entered in global config mode.

  • Named ACLs automatically renumber entries when a new entry is inserted between existing entries.

    Why it's wrong here

    Named ACLs do not automatically renumber; you must manually assign sequence numbers or use the 'resequence' command.

  • Named ACLs can be applied to interfaces using the 'ip access-group' command with the keyword 'in' or 'out'.

    Why this is correct

    Named ACLs are applied to interfaces with 'ip access-group' specifying 'in' or 'out'.

Visual reference

Source Router + ACL permit 10.0.0.0/8 deny any Server 10.0.0.5 ✓ 192.168.1.1 ✗ dropped ACLs evaluate top-down; first match wins — implicit deny all at end

About these practice questions

Courseiva writes every 350-401 question from scratch — 1,175 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.