CCNA Practice Quiz: 200-125 Quiz 26

1. Which of the following statements about ACLs are true? (Choose two)

• Inbound ACLs are applied before the routing process.
• An ACL without a permit traffic will not allow any traffic.
• You can have a maximum of two standard and two extended ACLs applied to each interface.
• Use a standard ACL to filter on source or destination IP address.

2. Which of the following commands can you use to see which ACL is applied to the first Ethernet interface?

• sh ip int
• sh int eth 0
• sh access-lists
• sh int
• sh ip access-lists

3. Which of the following commands will show details about all ACLs configured on the router?

• sh access-lists
• sh interface
• sh access-lists all
• sh log

4. You have just finished configuring ACL 101 and are ready to apply it to an interface. Before you do, however, you would like to view the ACL to ensure there are no mistakes.

Which command displays access list 101?

• show access-lists 101
• show IP access list 101
• show access lists detail
• debug access-list 101

5. You want to control Telnet access to your router and allow only access from within the corporate network. You have subnetted your network so that all IP addresses use subnets of the 172.18.0.0/16 network.

You want to apply the ACL to the VTY lines. Which of the following would be part of your design? (Choose two)

• access-list 7 permit 172.18.0.0 0.0.255.255
• ip access-class 7 in
• access-list 7 permit ip any any
• ip access-class 7 out
• ip access-group 7 in
• ip access-group 7 out

6. You want to create an ACL that prevents all traffic sent from network 178.68.48.0/20. Which wildcard mask value would you use?

• 0.0.15.255
• 255.255.240.0
• 0.0.207.255
• 0.0.20.255
• 0.0.240.255

7. You want to create an ACL statement that allows traffic from any network. Which network address and wildcard mask value should you use?

• 0.0.0.0 255.255.255.255
• 0.0.0.0 0.0.0.0
• 255.255.255.255 0.0.0.0
• 255.255.255.255 255.255.255.255

8. You are configuring ACLs on a router and want to deny traffic being sent to the 10.10.16.0/21 network. Which wildcard mask should you use with the access-list statement?

• 0.0.7.255
• 255.255.248.0
• 255.255.255
• 0.0.0.255

9. When attempting to make a Telnet connection to a remote router, the connection fails. You check the interface status on your local router and find the following:



Which of the following are likely causes of the problem? (Choose two)

• An ACL is preventing Telnet traffic.
• The wrong IP address has been configured on the local or remote router.
• Serial0/1/0 is using the wrong encapsulation type.
• The cable connecting Serial0/1/0 to the WAN is bad.
• The Serial0/1/0 interface is shut down.

10. You have configured ACLs on your router. A partial configuration for the router is shown below:



You want to block any traffic received on S0/1/0 that is sent to the host with address 192.168.1.55. However, you find that traffic sent to this host through that interface is still being allowed.

• Use an extended ACL instead of a standard ACL.
• Apply ACL 7 on S0/1/0 as an outbound ACL instead of inbound.
• Apply ACL 7 to the Fa0/0 and Fa0/1 interfaces instead of the S0/1/0 interface. Use the out parameter.
• Change the mask used in the ACL statements to 255.255.255.255.