Security Questions and Answers

Practice Mode
Showing 10 of 44 questions
Q1
Which of the following is true regarding access lists applied to an interface?
  • A You can place as many access lists as you want on any interface until you run out of memory.
  • B You can apply only one access list on any interface.
  • C One access list may be configured, per direction, for each layer 3 protocol configured on an interface.
  • D You can apply two access lists to any interface.
Answer: Option C
Q2
Which command would you use to apply an access list to a router interface?
  • A ip access-list 101 out
  • B access-list ip 101 in
  • C ip access-group 101 in
  • D access-group ip 101 in
Answer: Option C
Q3
Which of the following is an example of a standard IP access list?
  • A access-list 110 permit host 1.1.1.1
  • B access-list 1 deny 172.16.10.1 0.0.0.0
  • C access-list 1 permit 172.16.10.1 255.255.0.0
  • D access-list standard 1.1.1.1
Answer: Option B
Q4
You need to create an access list that will prevent hosts in the network range of 192.168.160.0 to 192.168.191.0. Which of the following lists will you use?
  • A access-list 10 deny 192.168.160.0 255.255.224.0
  • B access-list 10 deny 192.168.160.0 0.0.191.255
  • C access-list 10 deny 192.168.160.0 0.0.31.255
  • D access-list 10 deny 192.168.0.0 0.0.31.255
Answer: Option C
Q5
You are working on a router that has established privilege levels that restrict access to certain functions. You discover that you are not able to execute the command show running-configuration. How can you view and confirm the access lists that have been applied to the Ethernet 0 interface on your router?
  • A show access-lists
  • B show interface Ethernet 0
  • C show ip access-lists
  • D show ip interface Ethernet 0
Answer: Option D
Q6
What command will permit SMTP mail to only host 1.1.1.1?
  • A access-list 10 permit smtp host 1.1.1.1
  • B access-list 110 permit ip smtp host 1.1.1.1
  • C access-list 10 permit tcp any host 1.1.1.1 eq smtp
  • D access-list 110 permit tcp any host 1.1.1.1 eq smtp
Answer: Option D
Q7
You want to create a standard access list that denies the subnet of the following host: 172.16.50.172/20. Which of the following would you start your list with?
  • A access-list 10 deny 172.16.48.0 255.255.240.0
  • B access-list 10 deny 172.16.0.0 0.0.255.255
  • C access-list 10 deny 172.16.64.0 0.0.31.255
  • D access-list 10 deny 172.16.48.0 0.0.15.255
Answer: Option D
Q8
What router command allows you to determine whether an IP access list is enabled on a particular interface?
  • A show ip port
  • B show access-lists
  • C show ip interface
  • D show access-lists interface
Answer: Option C
Q9
You have created a named access list called Blocksales. Which of the following is a valid command for applying this to packets trying to enter interface s0 of your router?
  • A (config)# ip access-group 110 in
  • B (config-if)# ip access-group 110 in
  • C (config-if)# ip access-group Blocksales in
  • D (config-if)# blocksales ip access-list in
Answer: Option C
Q10
You want to create a standard access list that denies the subnet of the following host: 172.16.144.17/21. Which of the following would you start your list with?
  • A access-list 10 deny 172.16.48.0 255.255.240.0
  • B access-list 10 deny 172.16.144.0 0.0.7.255
  • C access-list 10 deny 172.16.64.0 0.0.31.255
  • D access-list 10 deny 172.16.136.0 0.0.15.255
Answer: Option B

📚 More from Networking

← All Topics 🎯 Practice ⏱️ Take Test 🔍 Search
Networking
Back to Networking
Other Subjects
Questions and Answers for Competitive Exams Various Entrance Test