logo

CuriousTab

CuriousTab

Discussion


Home Networking Security Comments

  • Question
  • Which command would you use to apply an access list to a router interface?


  • Options
  • A. ip access-list 101 out
  • B. access-list ip 101 in
  • C. ip access-group 101 in
  • D. access-group ip 101 in

  • Correct Answer
  • ip access-group 101 in 

    Explanation
    To apply an access list, the proper command is ip access-group 101 in.

  • Security problems


    Search Results


    • 1. Which of the following is true regarding access lists applied to an interface?

    • Options
    • A. You can place as many access lists as you want on any interface until you run out of memory.
    • B. You can apply only one access list on any interface.
    • C. One access list may be configured, per direction, for each layer 3 protocol configured on an interface.
    • D. You can apply two access lists to any interface.
    • Discuss
    • 2. Which router command allows you to view the entire contents of all access lists?

    • Options
    • A. Router# show interface
    • B. Router> show ip interface
    • C. Router# show access-lists
    • D. Router> show all access-lists
    • Discuss
    • 3. If you wanted to deny FTP access from network 200.200.10.0 to network 200.199.11.0 but allow everything else, which of the following command strings is valid?

    • Options
    • A. access-list 110 deny 200.200.10.0 to network 200.199.11.0 eq ftp
      access-list 111 permit ip any 0.0.0.0 255.255.255.255
    • B. access-list 1 deny ftp 200.200.10.0 200.199.11.0 any any
    • C. access-list 100 deny tcp 200.200.10.0 0.0.0.255 200.199.11.0 0.0.0.255 eq ftp
    • D. access-list 198 deny tcp 200.200.10.0 0.0.0.255 200.199.11.0 0.0.0.255 eq ftp
      access-list 198 permit ip any 0.0.0.0 255.255.255.255
    • Discuss
    • 4. What does a switch do when a frame is received on an interface and the destination hardware address is unknown or not in the filter table?

    • Options
    • A. Forwards the switch to the first available link
    • B. Drops the frame
    • C. Floods the network with the frame looking for the device
    • D. Sends back a message to the originating station asking for a name resolution
    • Discuss
    • 5. If you want to disable STP on a port connected to a server, which command would you use?

    • Options
    • A. disable spanning-tree
    • B. spanning-tree off
    • C. spanning-tree security
    • D. spanning-tree portfast
    • Discuss
    • 6. Which of the following is an example of a standard IP access list?

    • Options
    • A. access-list 110 permit host 1.1.1.1
    • B. access-list 1 deny 172.16.10.1 0.0.0.0
    • C. access-list 1 permit 172.16.10.1 255.255.0.0
    • D. access-list standard 1.1.1.1
    • Discuss
    • 7. What command will permit SMTP mail to only host 1.1.1.1?

    • Options
    • A. access-list 10 permit smtp host 1.1.1.1
    • B. access-list 110 permit ip smtp host 1.1.1.1
    • C. access-list 10 permit tcp any host 1.1.1.1 eq smtp
    • D. access-list 110 permit tcp any host 1.1.1.1 eq smtp
    • Discuss
    • 8. You configure the following access list:

      access-list 110 deny tcp 10.1.1.128 0.0.0.63 any eq smtp
      access-list 110 deny tcp any eq 23
      int ethernet 0
      ip access-group 110 out
      What will the result of this access list be?

    • Options
    • A. Email and Telnet will be allowed out E0.
    • B. Email and Telnet will be allowed in E0.
    • C. Everything but email and Telnet will be allowed out E0.
    • D. No IP traffic will be allowed out E0.
    • Discuss
    • 9. If you wanted to deny all Telnet connections to only network 192.168.10.0, which command could you use?

    • Options
    • A. access-list 100 deny tcp 192.168.10.0 255.255.255.0 eq telnet
    • B. access-list 100 deny tcp 192.168.10.0 0.255.255.255 eq telnet
    • C. access-list 100 deny tcp any 192.168.10.0 0.0.0.255 eq 23
    • D. access-list 100 deny 192.168.10.0 0.0.0.255 any eq 23
    • Discuss
    • 10. You have created a named access list called Blocksales. Which of the following is a valid command for applying this to packets trying to enter interface s0 of your router?

    • Options
    • A. (config)# ip access-group 110 in
    • B. (config-if)# ip access-group 110 in
    • C. (config-if)# ip access-group Blocksales in
    • D. (config-if)# blocksales ip access-list in
    • Discuss


    Comments

    There are no comments.

Enter a new Comment