Module G5: ACL (PE) Flashcards
Egress traffic is also known as what?
outbound
What command would you use if you were configuring an ACL for any source IP?
any
At what OSI layer(s) do(es) Standard ACL filtering occur?
3
Which type of mask is used in ACE’s of Access Control Lists?
wildcard
What option will look for any inbound traffic that is trying to initiate a connection?
established
What is a rule based list that filters inbound and outbound traffic?
access control list
Inbound traffic is also known as?
ingress
What is the default wildcard mask for Access-list?
0.0.0.0
What looks like an inverted subnet mask?
wildcard mask
What are the two Extended ACL ranges? (use format xxx-xxx, xxx-xxx)
100-199, 2000-2699
What is at the end of each Access List?
Implicit Deny
Outbound traffic is also known as?
egress
Which of these wildcard masks can be replaced by the single word host in a standard or extended ACL?
- 255.255.255
- 0.0.0
- 255.255.0
- 0.0.255
0.0.0.0
What are the two Standard ACL ranges? (use format xxx-xxx, xxx-xxx)
1-99, 1300-1999
Ingress traffic is also known as what?
inbound
True or False ACLs be applied in two directions? (type in answer)
True
What would the wildcard mask be of the subnet mask: 255.255.0.0
00000000.00000000.11111111.11111111
Which type of ACL should be placed closest to the source of traffic?
extended
Which type of traffic do you need to be more cautious of on a network?
ingress
Which type of ACL should be placed closest to the destination of traffic?
standard
The wildcard mask that is associated with 192.168.12.96/27 is ________________.
(Note: The wildcard mask can be found by subtracting the subnet mask from 255.255.255.255.)
0.0.0.31
Which type of access list limits the description of traffic by source address?
standard
You want to apply an access list of 198 to an interface to filter traffic into the interface. Which command will achieve this?
Router(config)#ip access-list 198 in fast 0/1
Router(config-if)#ip access-list 198 in
Router(config-if)#ip access-class 198 in
Router(config-if)#ip access-group 198 in
Which statement will block traffic for a server of 192.168.1.5 for SSH?
Router(config)#access-list 90 deny ip host 192.168.1.5 eq 22
Router(config)#access-list 90 deny tcp any host 192.168.1.5 eq 22
Router(config)#access-list 199 deny tcp host 192.168.1.5 any eq 23
Router(config)#access-list 199 deny tcp any host 192.168.1.5 eq 22
This rule can be found at the bottom of any ACL.
implicit deny
What is a more robust way to block inbound traffic that is trying to initiate a connection?
reflexive acl
What acts like a folder and holds a group of ACL’s?
Named ACL
Where are Reflexive ACL’s typically placed on a router?
Outside
A router does not have ACLs configured by default.
True/False
True
A router compares information within a packet against each ACE, in sequential order, to determine if the packet matches one of the ACEs.
True/False
True
