Access Control Lists (IPV4)

1. Barney is a host with IP address 10.1.1.1 in subnet 10.1.1.0/24. Which of the following are
things that a standard IP ACL could be configured to do? (Choose two answers.)
a. Match the exact source IP address.
b. Match IP addresses 10.1.1.1 through 10.1.1.4 with one access-list command without
matching other IP addresses.
c. Match all IP addresses in Barney’s subnet with one access-list command without
matching other IP addresses.
d. Match only the packet’s destination IP address.
2. Which of the following answers list a valid number that can be used with standard numbered
IP ACLs? (Choose two answers.)
a. 1987
b. 2187
c. 187
d. 87

3. Which of the following wildcard masks is most useful for matching all IP packets in subnet
10.1.128.0, mask 255.255.255.0?
a. 0.0.0.0
b. 0.0.0.31
c. 0.0.0.240
d. 0.0.0.255
e. 0.0.15.0
f. 0.0.248.255
4. Which of the following wildcard masks is most useful for matching all IP packets in subnet
10.1.128.0, mask 255.255.240.0?
a. 0.0.0.0
b. 0.0.0.31
c. 0.0.0.240
d. 0.0.0.255
e. 0.0.15.255
f. 0.0.248.255
5. ACL 1 has three statements, in the following order, with address and wildcard mask values
as follows: 1.0.0.0 0.255.255.255, 1.1.0.0 0.0.255.255, and 1.1.1.0 0.0.0.255. If a router
tried to match a packet sourced from IP address 1.1.1.1 using this ACL, which ACL statement
does a router consider the packet to have matched?
a. First
b. Second
c. Third
d. Implied deny at the end of the ACL
6. Which of the following access-list commands matches all packets sent from hosts in subnet
172.16.5.0/25?
a. access-list 1 permit 172.16.0.5 0.0.255.0
b. access-list 1 permit 172.16.4.0 0.0.1.255
c. access-list 1 permit 172.16.5.0
d. access-list 1 permit 172.16.5.0 0.0.0.128