My Profile
Active Members
TodayLast 7 Days
more...
Awards & Gifts
Online Exams
Fresher Jobs
Our fresher job section is exclusively for fresh graduates! Find jobs for freshers in major Indian
cities including Bangalore, Chennai, Hyderabad, Pune or Kochi
Resources
Find educational articles, blogs, discussion threads and other resources.
Colleges
Find details about any college in India or search for courses.
Advertisements
|
CCNA
Posted Date: 22 Apr 2008 Resource Type: Articles/Knowledge Sharing Category: Education
|
Posted By: sac Member Level: Diamond
Rating:  Points: 2
|
|
|
71. What are the two types of access lists that can be configured on a Cisco router?
* Standard
* Extended
* Filtering
* Packet
Correct answer: A & B
The access lists are standard and extended. Standard access lists for IP check the source address of packets that could be routed. Extended access lists can check the source and destination packet plus check for specific protocols, port numbers, etc.
72. When using access lists, what does a Cisco router check first?
* To see if the packet is routable or bridgeable
* The destination address
* The source address
* The packet contents
Correct answer: A
The first thing checked is to see if the packet is routable or bridgeable. If it is not, the packet will be dropped.
73. How many access lists are allowed per interface?
* One per port, per protocol
* Two per port, per protocol
* Unlimited
* Router interface +1 per port.
Correct answer: A
Only one access list is allowed per interface. An access list must have conditions that test true for all packets that use the access list.
74. What do the following commands accomplish?
access-list 1 deny 172.16.4.0 0.0.0.255
access-list 1 permit any interface ethernet 0
IP access-group 1 out
* This will block traffic from subnet 172.16.4.0 and allow all other traffic.
* This will allow traffic from subnet 172.16.4.0 and block all other traffic.
* All traffic is allowed.
* All traffic is blocked.
Correct answer: A
This will block traffic from subnet 172.16.4.0 and allow all other traffic. The first statement “access-list 1 deny 172.16.4.0 0.0.0.255? will deny access to the subnet 172.16.4.0.
75. What do the following statements in an extended access list accomplish?
access-list 101 deny TCP 172.16.4.0 0.0.0.255 172.16.3.0 0.0.0.255 eq 21
access-list 101 deny TCP 172.16.4.0 0.0.0.255 172.16.3.0 0.0.0.255 eq 20
access-list 101 permit TCP 172.16.4.0 0.0.0.255 0.0.0.0 255.255.255.255
* This will block ftp traffic.
* This will block http traffic.
* This will permit ftp traffic.
* This will permit tftp traffic.
Correct answer: A
This will block ftp traffic since ftp uses ports 20 and 21.
|
Responses
|
No responses found. Be the first to respond and make money from revenue sharing program.
|
|
|