GoConqr has a new look! Let us know what you think.

Sign up free

Quiz

Chap 4

Darth Mole 19 questions

Take the quiz

Questions in this quiz (19)

  1. 1Which range represents all the IP addresses that are affected when network 10.120.160.0 with a wildcard mask of 0.0.7.255 is used in an ACE?
    1. A10.120.160.0 to 10.127.255.255
    2. B10.120.160.0 to 10.120.167.255
    3. C10.120.160.0 to 10.120.168.0
    4. D10.120.160.0 to 10.120.191.255
  2. 2What two functions describe uses of an access control list?
    1. AACLs assist the router in determining the best path to a destination.
    2. BStandard ACLs can restrict access to specific applications and ports.
    3. CACLs provide a basic level of security for network access.
    4. DACLs can permit or deny traffic based upon the MAC address originating on the router.
    5. EACLs can control which areas a host can access on a network.
  3. 3Which two statements describe the effect of the access control list wildcard mask 0.0.0.15? (Choose two.)
    1. AThe first 28 bits of a supplied IP address will be ignored.
    2. BThe last four bits of a supplied IP address will be ignored.
    3. CThe first 32 bits of a supplied IP address will be matched.
    4. DThe first 28 bits of a supplied IP address will be matched.*
    5. EThe last five bits of a supplied IP address will be ignored.
  4. 4A network administrator is configuring an ACL to limit the connection to R1 vty lines to only the IT group workstations in the network 192.168.22.0/28. The administrator verifies the successful Telnet connections from a workstation with IP 192.168.22.5 to R1 before the ACL is applied. However, after the ACL is applied to the interface Fa0/0, Telnet connections are denied. What is the cause of the connection failure?Image for question 4
    1. AThe permit ACE specifies a wrong port number.
    2. BThe enable secret password is not configured on R1.
    3. CThe login command has not been entered for vty lines.
    4. DThe IT group network is included in the deny statement.
    5. EThe permit ACE should specify protocol ip instead of tcp.
  5. 5The network administrator that has the IP address of 10.0.70.23/25 needs to have access to the corporate FTP server (10.0.54.5/28). The FTP server is also a web server that is accessible to all internal employees on networks within the 10.x.x.x address. No other traffic should be allowed to this server. Which extended ACL would be used to filter this traffic, and how would this ACL be applied? (Choose two.)Image for question 5
    1. Aaccess-list 105 permit ip host 10.0.70.23 host 10.0.54.5
      access-list 105 permit tcp any host 10.0.54.5 eq www
      access-list 105 permit ip any any
    2. Baccess-list 105 permit tcp host 10.0.54.5 any eq www
      access-list 105 permit tcp host 10.0.70.23 host 10.0.54.5 eq 20
      access-list 105 permit tcp host 10.0.70.23 host 10.0.54.5 eq 21
    3. Caccess-list 105 permit tcp host 10.0.70.23 host 10.0.54.5 eq 20
      access-list 105 permit tcp host 10.0.70.23 host 10.0.54.5 eq 21
      access-list 105 permit tcp 10.0.0.0 0.255.255.255 host 10.0.54.5 eq www
      access-list 105 deny ip any host 10.0.54.5
      access-list 105 permit ip any any
    4. DR2(config)# interface gi0/0
      R2(config-if)# ip access-group 105 in
    5. ER1(config)# interface gi0/0
      R1(config-if)# ip access-group 105 out
    6. FR1(config)# interface s0/0/0
      R1(config-if)# ip access-group 105 out
  6. 6A network administrator is designing an ACL. The networks 192.168.1.0/25, 192.168.0.0/25, 192.168.0.128/25, 192.168.1.128/26, and 192.168.1.192/26 are affected by the ACL. Which wildcard mask, if any, is the most efficient to use when specifying all of these networks in a single ACL permit entry?
    1. A0.0.0.127
    2. B0.0.0.255
    3. C0.0.1.255
    4. D0.0.255.255
  7. 7A network administrator wants to permit only host 192.168.1.1 /24 to be able to access the server 192.168.2.1 /24. Which three commands will achieve this using best ACL placement practices? (Choose three.)Image for question 7
    1. AR2(config)# access-list 101 permit ip host 192.168.1.1 host 192.168.2.1
    2. BR2(config)# access-list 101 permit ip 192.168.1.0 255.255.255.0 192.168.2.0 255.255.255.0
    3. CR2(config)# interface fastethernet 0/0
    4. DR2(config-if)# ip access-group 101 out
    5. ER2(config)# access-list 101 permit ip any any
    6. FR2(config-if)# ip access-group 101 in
  8. 8Which two statements are correct about extended ACLs? (Choose two)
    1. AExtended ACLs use a number range from 1-99.
    2. BExtended ACLs end with an implicit permit statement.
    3. CExtended ACLs evaluate the source and destination addresses.
    4. DPort numbers can be used to add greater definition to an ACL.
    5. EMultiple ACLs can be placed on the same interface as long as they are in the same direction.
  9. 9Which three values or sets of values are included when creating an extended access control list entry? (Choose three.)
    1. Aaccess list number between 1 and 99
    2. Baccess list number between 100 and 199
    3. Cdefault gateway address and wildcard mask
    4. Ddestination address and wildcard mask
    5. Esource address and wildcard mask
    6. Fsource subnet mask and wildcard mask
    7. Gdestination subnet mask and wildcard mask
  10. 10This ACL is applied on traffic outbound from the router on the interface that directly connects to the 10.0.70.5 server. A request for information from a secure web page is sent from host 10.0.55.23 and is destined for the 10.0.70.5 server. Which line of the access list will cause the router to take action (forward the packet onward or drop the packet)?Image for question 10
    1. A1
    2. B2
    3. C3
    4. D4
    5. E5
    6. Fthe deny ip any any that is at the end of every ACL

Information

Description
Information Technology Quiz on Chap 4, created by Darth Mole on 12/08/2018.
Language
English
Views
0
Rating
No ratings yet
Rate this quiz
Rate this quiz

Feedback

What is it about?

What do you think of the new look?

How do you like it?