@@QUES 020101 T/F Q,248,454,255,333
Do you think the following statement is true or false?

You use queuing strategies to permit or deny packets from crossing specified interfaces.

|
2
|

|
That's right.
|
Actually, the statement is false.
|
The statement is false.

@@QUES 020102 SXY Q,155,348,350,311
What do you think happens if no conditions in the access list match an IP address?

|
Choose an option.
|
The Cisco IOS reports an error
The Cisco IOS rejects the address
The Cisco IOS checks the address against the conditions again
|

|
2
|
That's right.
|
That's not it. The correct option is now highlighted.
|
The correct option is now highlighted.

@@QUES 020103 SXY Q,110,402,376,315
What do you think the router does first with a packet when you define an inbound access list?

|
Choose an option.
|
The router sends the packet to a controlled interface and then checks it against the access list
The router checks the packet against the access list and then processes the packet
|

|
2
|
That's right.
|
That's not it. The correct option is now highlighted.
|
The correct option is now highlighted.

@@QUES 020201 Y/N Q,310,450,313,282
Do you think you can selectively add or remove access list command lines once you have created the list?

|
2
|

|
You're right.
|
In fact, the answer is No. You have to make any subsequent additions at the end of the list.
|
The answer is No.

@@QUES 020202 SXY Q,280,443,328,341
What do you think happens if you attempt to apply an access list that has not yet been defined?

|
Choose an option.
|
The Cisco IOS software will execute an access list command denying all access to that interface
The Cisco IOS software will act as though there is no access list and all packets will be accepted
|

|
2
|
That's right.
|
That's not it. The correct option is now highlighted.
|
The correct option is now highlighted.

@@QUES 020203 SXY Q,8,420,302,328
Which of the following commands do you think you use to link an access list to a given router interface?

|
Choose an option.
|
Ip Access-List
Access-List
Ip Access-Group
Access-Group
|

|
3
|
That's right.
|
That's not it. The correct command is now highlighted.
|
The correct command is now highlighted.

@@QUES 020204 Y/N Q,303,425,294,261
Do you think you can test the access list from the SanFran router?

|
2
|

|
You're right.
|
In fact, you can't.
|
The answer is No.


@@QUES 020301 SFB Q,318,396,290,204
See if you can enter the command to start the configuration process from a terminal.

|
Type your answer.
|
You need to access a Cisco router configuration mode first.
|
%007config term,configure terminal
|
That's right.
|
Yes, but the word used here is "config term".
|
Try again.
|

|

|

|

|
That's not the command required here. Try again.
|
The answer is "config term".
|
The answer is now shown.

@@QUES 020302 SYF Q,245,437,376,304
See if you can identify the command you use to define an access list (list number 2) to permit traffic from the server (IP address 172.16.32.5).

|
Choose an option.
|
%010access-list 2 permit 172.16.32.5
%010access-list permit 2 172.16.32.5
%010access-list permit 172.16.32.5 2
%010access-list-permit 2 172.16.32.5
|

|
1
|
That's right.
|
That's not it. The correct command is now highlighted.
|
The correct command is now shown.

@@QUES 020303 SYF Q,231,438,390,293
See if you can identify the command that completes the command shown here, denying access to all other traffic from subnet 172.16.32.0.

|
Choose an option.
|
%010deny 172.16.32.0 255.255.255.0
%010deny 172 16.32.0 0.255.255.255
%010deny 172.16.32.0 0.0.0.255
|

|
3
|
That's right.
|
That's not it. The correct command is now highlighted.
|
The correct command is now shown.

@@QUES 020304 SFB Q,317,434,292,208
See if you can enter the appropriate command to access interface configuration mode in this case.

|
Type your answer.
|
You want to link the access list to the router's Ethernet interface.
|
%007interface ethernet 0,int e 0, interface e 0
|
That's right.
|
Yes, but the command used here is "interface ethernet 0".
|
Try again.
|

|

|

|

|
That's not the command required here. Try again.
|
The answer is "interface ethernet 0".
|
The answer is now shown.

@@QUES 020305 SYF Q,292,438,323,284
See if you can identify the command that applies access list number 2 to inbound traffic on the router's E0 interface.

|
Choose an option.
|
%010ip access-list 2 in
%010ip access-group 2 in
%010ip access-group in 2
|

|
2
|
That's right.
|
That's not it. The correct command is now highlighted.
|
The correct command is now shown.

@@QUES 020306 Y/N Q,60,433,266,282
Do you think you have any more commands to enter in interface or global configuration mode?

|
2
|

|
You're right.
|
In fact, you don't. You can now leave configuration mode by pressing ŁUCtrl+ZŁu.
|
The answer is No.

@@QUES 020307 SFB Q,302,421,311,264
There is no entry in your router's host table for the London router, but you have an IP address of 172.16.66.1.

See if you can enter the command that you use to access the London router.

|
Type your answer.
|

|
%007telnet 172.16.66.1
|
That's right.
|
Yes, but the command used here is "telnet 172.16.66.1".
|
Try again.
|

|

|

|

|
That's not the command required here. Try again.
|
The answer is "telnet 172.16.66.1".
|
The answer is now shown.


@@QUES 020308 SYF Q,312,437,300,323
See if you can identify the command that tests whether you can reach the server (172.16.32.5) linked to the Sydney router's E0 interface.

|
Choose an option.
|
%010ping 172.16.32.0
%010ping 172.16.32.5
%010ping 172.16.32.1
|

|
2
|
That's right.
|
That's not it. The correct command is now highlighted.
|
The correct command is now shown.

@@QUES 020309 SFB Q,314,417,301,225
See if you can enter the command to confirm that the access list is filtering traffic from a workstation (IP address 172.16.32.6) on the server's subnet.

|
Type your answer.
|

|
%007ping 172.16.32.6
|
That's right.
|
Yes, but the command used here is "ping 172.16.32.6".
|
Try again.
|

|

|

|

|
That's not the command required here. Try again.
|
The answer is "ping 172.16.32.6".
|
The answer is now shown.

@@QUES 020101t MXY Q,0,0,452,402
Identify the true statement(s) about IP access lists.

|
Choose each appropriate item.
|
You can use IP access lists to limit the amount of broadcast traffic on the network by eliminating the need to dynamically advertise network routes across certain interfaces
An IP access list is a sequential collection of permit and deny conditions that apply to IP addresses
You can use IP access lists to control virtual terminal line access
The first match between an IP packet and a router's access list determines whether the Cisco IOS accepts or rejects the packet
|
2,3,4
|
28
|
Correct.
|
7 per correct decision
|
Partly right. The correct options are now highlighted.
|
You have not made any correct choices. The correct options are now highlighted.

@@QUES 020102t XYF Q,143,394,354,322
When you define an  ____________  IP access list, the incoming packet is routed first to a controlled interface and then checked against that interface's access list.

|
Choose an option to fill the blank.
|
%010inbound
%010outbound
|
2
|
10
|
Correct.
|
Incorrect. The correct option is now highlighted.
|
The full statement is now shown.

@@QUES 020103t T/F Q,138,390,364,295
If an outbound IP access list denies an address, the router does not discard the packet, but sends it to an alternatively defined interface.

|
2
|
10
|
Correct.
|
Incorrect. The statement is false.

@@QUES 020104t SXY Q,0,0,361,350
When a router interface's IP access list denies and discards a packet, which of the following protocols is used to register the loss?

|
Choose an option.
|
UDP
ICMP
TCP
ARP
|
2
|
15
|
Correct.
|
Incorrect. The correct option is now highlighted.


@@QUES 020201t SXY Q,0,0,323,343
Which of the following commands do you use to define a standard access list?

|
Choose an option.
|
Ip Access-List
Access-List
Access List
Ip Access List
|
2
|
20
|
Correct.
|
Incorrect. The correct command is now highlighted.

@@QUES 020202t T/F Q,0,0,352,326
When you create a standard access list and you omit the mask from an associated IP host address specification, the mask is implicitly assumed to be 255.255.255.255.

|
2
|
10
|
Correct.
|
Incorrect. The statement is false.

@@QUES 020203t XYF Q,0,0,347,354
You use the  _________________  command to link an existing access list to an interface.

|
Choose an option to fill the blank.
|
Ip Access-List
Ip Access List
Access-Group
Ip Access-Group
|
4
|
20
|
Correct.
|
Incorrect. The correct command is now highlighted.
|
The full statement is now shown.

@@QUES 020204t MXY Q,42,446,550,407
Identify the true statement(s) about standard IP access list configuration.

|
Choose each appropriate item.
|
When you create an access list, by default, the end of the list contains an implicit permit statement allowing all addresses for which it did not find a match
When you use the Access-List command, specifying the keyword "any" means that the address 255.255.255.255 is used along with the mask 0.0.0.0 and matches any address
Once you create an access list you cannot selectively add or remove command lines from the list
If you attempt to apply an access list that has not yet been defined, the Cisco IOS software acts as though there is no access list, effectively permitting all packets
|
3,4
|
28
|
Correct.
|
7 per correct decision
|
Partly right. The correct options are now highlighted.
|
You have not made any correct choices. The correct options are now highlighted.

@@QUES 020205t SXY Q,0,0,347,350
Which of the following commands do you use to link an existing access list to a terminal line or range of lines?

|
Choose an option.
|
Ip Access-Group
Access-List
Access-Class
Ip Access-Class
|
3
|
20
|
Correct.
|
Incorrect. The correct command is now highlighted.
|
|
|
|
|
|
