New CCNA – Access list Questions
Note: If you are not sure about Access list, please read our Access List Tutorial.
Question 1
Which item represents the standard IP ACL?
A. access-list 50 deny 192.168.1.1 0.0.0.255
B. access-list 110 permit ip any any
C. access-list 2500 deny tcp any host 192.168.1.1 eq 22
D. access-list 101 deny tcp any host 192.168.1.1
Answer: A
Explanation
The standard access lists are ranged from 1 to 99 and from 1300 to 1999 so only access list 50 is a standard access list.
Question 2
A network administrator is configuring ACLs on a Cisco router, to allow traffic from hosts on networks 192.168.146.0, 192.168.147.0, 192.168.148.0, and 192.168.149.0 only. Which two ACL statements, when combined, would you use to accomplish this task? (Choose two)
A. access-list 10 permit ip 192.168.146.0 0.0.1.255
B. access-list 10 permit ip 192.168.147.0 0.0.255.255
C. access-list 10 permit ip 192.168.148.0 0.0.1.255
D. access-list 10 permit ip 192.168.149.0 0.0.255.255
E. access-list 10 permit ip 192.168.146.0 0.0.0.255
F. access-list 10 permit ip 192.168.146.0 255.255.255.0
Answer: A C
Question 3
Refer to the exhibit.
| ACL 102 access-list 102 deny tcp 172.21.1.1 0.0.0.255 any eq 80 access-list 102 deny ip any any RouterA#show ip int |
An attempt to deny web access to a subnet blocks all traffic from the subnet. Which interface command immediately removes the effect of ACL 102?
A. no ip access-class 102 in
B. no ip access-class 102 out
C. no ip access-group 102 in
D. no ip access-group 102 out
E. no ip access-list 102 in
Answer: D
Question 4
On which options are standard access lists based?
A. destination address and wildcard mask
B. destination address and subnet mask
C. source address and subnet mask
D. source address and wildcard mask
Answer: D
Question 5
Refer to the exhibit.
| ACL 10 Statements are written in this order: A. permit any B. deny 172.21.1.128 0.0.0.15 C. permit 172.21.1.129 0.0.0.0 D. permit 172.21.1.142 0.0.0.0 |
Statements A, B, C, and D of ACL 10 have been entered in the shown order and applied to interface E0 inbound, to prevent all hosts (except those whose addresses are the first and last IP of subnet 172.21.1.128/28) from accessing the network. But as is, the ACL does not restrict anyone from the network. How can the ACL statements be re-arranged so that the system works as intended?
A. ACDB
B. BADC
C. DBAC
D. CDBA
Answer: D
Question 6
Which statement about access lists that are applied to an interface is true?
A. you can apply only one access list on any interface
B. you can configure one access list, per direction, per layer 3 protocol
C. you can place as many access lists as you want on any interface
D. you can configure one access list, per direction, per layer 2 protocol
Answer: B
Explanation
We can have only 1 access list per protocol, per direction and per interface. It means:
+ We can not have 2 inbound access lists on an interface
+ We can have 1 inbound and 1 outbound access list on an interface
Question 7
A network engineer wants to allow a temporary entry for a remote user with a specific username and password so that the user can access the entire network over the internet. Which ACL can be used?
A. reflexive
B. extended
C. standard
D. dynamic
Answer: D
Explanation
We can use a dynamic access list to authenticate a remote user with a specific username and password. The authentication process is done by the router or a central access server such as a TACACS+ or RADIUS server. The configuration of dynamic ACL can be read here: http://www.cisco.com/en/US/tech/tk583/tk822/technologies_tech_note09186a0080094524.shtml
Q1, Q2, Q3 and Q5 in yesterday’s exam.
All questions from 9tut and Watson dump.
Sim ACL, ACL2 and EIGRP.
Thank you 9tut!!
MR. yes we can
I am also taking 200-120 with in next week. Please send me latest dumps. thanks for the help
hisham.abdelaziz68@yahoo.com
@yes we can
can you pls send me latest dumps,thanks my email rizinfo99@yahoo.com
Q1,3,6 were in the today exam
Q4 and Q7.
please send me latest dumps @ joji302@gmail.com
Thanks
Question 1,5,6 were in the exam recently
Please send me latest dumps. My email is adhiietz@yahoo.com. thanks for help
hello guys!! can you please send me latest dumps.. the watson dumps.. Thank you so much in advance ^^, here’s my email kimjim_guillena@yahoo.com
Hi,please can anyone help me send the new Watson dumps to elshen.rehim@gmail.com
Thanks
plz send me dumps for cisco 200-120 exam preparation …..my email address is amit.ecb.ite@gmail.com
Hi everybody!!
Someone can sent me the latest dumps? I will make the exam soon and I would like to be totally ready!
Thank in advance ;)
Hi everybody!!
Someone can sent me the latest dumps? I will make the exam soon and I would like to be totally ready!
Thank in advance ;) diegop.pin@gmail.com
hi
Hi All,
Can anybody send me the Watson 200-120 exam prep vce file? This will be highly appreciated:
jacopeters@hotmail.com
pls send me the latest dumps. charisse@inbox.com
Thank you!
pls send me the latest dumps to ben_taheri@yahoo.com
Thank you!
I failed my exam today,but retaking it on the 4th..all questions from 9tut thnx
Hello,please can anyone help me send the new Watson dumps to vesna.davitkova@yahoo.com
Can anybody please explain Q2′s answer?
Q2 Explanation:
access-list 10 permit ip 192.168.146.0 0.0.1.255 will include the 192.168.146.0 and
192.168.147.0 subnets, while access-list 10 permit ip 192.168.148.0 0.0.1.255 will include
the192.168.148.0 and 192.168.149.0subnets.
can someone send me the latest dumps please to michaelcollinsgreat@gmail.com
can you guys send me the latest dumps for exam 200-120 to omarchavez18@yahoo.com
Thank you,
Achille how can you fail exam when you say all questions were from 9tut … ?
Passed Marks: 975, 99.8% from 9tut no need to exert effort for latest dumps. Labs EIGRP, ACL Sim 1 & 2, practice all modifications coz it was given on random. 9tut is enough to pass the exam. GoodLuck. .
please send latest dumps to kranthi9079@gmail.com
please send me the latest valid dumps it my imail eliseumiguel23@gmail.com I will get my exam in few days
please send latest dump to aepate93@gmail.com…THANKS!!!
Hi u guy , pls send lastest dumps to spaganha@yahoo.com
because I will take my CCNA exam soon.
Thanks in advanced.
Where I can see Sim ACL, ACL2 and EIGRP in here? Thanks!
please send me latest dump for exam prep ali.massad@gmail.com
Ｉ need latest dumps ，someone help me please !! dicksonlee89@gmail.com
Thanks in advanced.
why there is ”IP” in all choices of Q # 2 .
Standard ACL is given as :
router(config)#access-list 10 permit 192.168.146.0 0.0.1.255
router(config)#access-list 10 permit 192.168.148.0 0.0.1.255
correct me if m wrong…..
Why do people keep asking for dumps on here? Does that mean signing up for $10/m or whatever the cost is too much or those dumps are some other better material? Permit my ignorance…
please What do you mean ACL1 & ACL2
Ahmed, this mean the Labs ACL1 & ACL2 and EIGRP that are here at this site, will be on the test.
can you guys send me the latest dumps for exam 200-120 to aribi_walid@yahoo.fr
Thank you.
Where I can see Sim ACL, ACL2 and EIGRP in here? Thanks!
AGABANI
When you create a account and get full access after donating in the top right you will see the simulators.
Q6 in 5th Sep 2014 exam
@Rani
How was you exam?
Thanks in advance
Hi ,Can u share me the latest dumps as I was going to take test next week to my mail id:suresh.potla2002@gmail.com
Please send me latest dumps. thanks for the help.
ogulcanyucel@hotmail.com
i want to take the CCNA 200-120 in comming next weeks . so , plz give me a latest dumps file to
ayemyatthandar89@gmail.com…….
Sir pls send the latest dumps link on cisco exam ,pls send my mail. preamkumaarghills@gmail.com
hello guys
why in Q3 is D is correct ?
please can you send me the watson dumps ???
jose_amo_2@hotmail.com
I really need that…. thanks
Please send me the latest dumps link for CCNA certification, My email add is mehulsharmak@yahoo.com
Passed today with 958
Q4 was on test
thanx 9tut
Hi all,
Many thanks for your all support. I will take my exam on 25th Sept.
Some one explain me for more detail Q7? And share us latest dumps?
Thanks 9tut