IOS Security

Question 1

When can object-groups be used in IOS ACLs?

Answer 1

Only on IPv4 extended ACLs.

Question 2

How do you view L2 MAC address as well as L3/L4 information on traffic matching an ACE?

Answer 2

Add the log-input keyword to the ACE.

Question 3

How do you tag an ACL log entry to be searchable in a syslog receiver?

Answer 3

Added a user defined cookie at the end of the ACE log keyword.

Question 4

How do you tag an ACL with a hash value that can be unique within a syslog receiver?

Answer 4

Use the global command “ip access-list logging hash-generation”

Question 5

True or False: By default on the initial packet in a session is used to generate a log message?

Answer 5

True

Question 6

How do you enable a router to match locally generated traffic on an ACL?

Answer 6

By using the command “ip access-list match-local-traffic”

Question 7

Ture or False: Inbound ACLs will filter both data plane and control plane traffic?

Answer 7

True