Soru

Zorluk: KolayAccess Control Lists (Standard and Extended IPv4 ACLs)

A network administrator is reviewing the fundamental operation of standard IPv4 Access Control Lists (ACLs) on a Cisco IOS router. Which two statements correctly describe the operational characteristics of standard IPv4 ACLs?

  1. Standard IPv4 ACLs filter network traffic based solely on the source IPv4 address.Cevap
  2. Traffic that does not match any explicit permit or deny rule in the ACL is dropped by an implicit deny entry.Cevap
  3. C
    Unmatched packets are automatically permitted and forwarded out the interface by default.
  4. D
    Standard IPv4 ACLs inspect Layer 4 TCP and UDP port numbers to restrict specific application traffic.

Cevap

The correct statements are that standard IPv4 ACLs filter traffic based strictly on source IPv4 addresses, and that unmatched packets are dropped due to the implicit deny statement at the end of the list.
Standard IPv4 ACLs make forwarding or dropping decisions based exclusively on the packet's source IPv4 address. Additionally, any traffic that does not match an explicit rule in the list is dropped automatically by the default implicit deny clause at the end of the ACL.

Adım Adım Çözüm

1
Identify the filtering criteria capability of standard IPv4 ACLs.
Standard IPv4 ACLs examine only the source address field within the IPv4 packet header.
Standard ACL syntax and logic lack fields to evaluate destination IP addresses, transport protocols, or port numbers.
2
Analyze default ACL evaluation behavior for unmatched packets.
Every Cisco ACL concludes with an implicit 'deny ip any' rule.
If a packet is evaluated against all explicit ACL statements without a match, it hits the implicit deny statement at the end and is discarded.

Anahtar Kavram

Standard IPv4 ACL Filtering Scope and Implicit Deny Mechanism
Bu soruyu puanla