ISC Practice Question: Systems Security Implementation Verification And Validation
When validating the security implementation of a Cisco ASA firewall, which command provides the most accurate verification of the currently applied Access Control List (ACL) to a specific interface?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
show access-list
The 'show access-list' command displays the ordered list of rules and their hit counts, which is vital for validation.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
show run interface
Why it's wrong here
This shows interface configuration, not the logic of the applied ACL.
- ✗
show version
Why it's wrong here
This only displays system hardware and software information.
- ✓
show access-list
Why this is correct
This command displays the ACL entries and their hit counts, allowing you to verify traffic filtering.
- ✗
show interface status
Why it's wrong here
This provides physical link status, not security rule enforcement details.
Visual reference
About these practice questions
Courseiva writes every ISC question from scratch — 209 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official (ISC)² exam blueprint
This ISC practice question is part of Courseiva's free (ISC)² certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ISC exam.