Standard IP ACL | Cisco Certified Network Associate Exam

Standard IP ACL

Prev Question Next Question

Question

Which item represents the standard IP ACL?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

B

The correct answer is C. Access list 101 deny tvp any host 192.168.1.1

Access Control Lists (ACLs) are used to filter traffic based on a set of rules. These rules can be used to permit or deny traffic based on source and destination IP addresses, protocols, and port numbers.

There are two types of ACLs: Standard ACLs and Extended ACLs. Standard ACLs can only filter traffic based on the source IP address, while Extended ACLs can filter based on source and destination IP addresses, protocols, and port numbers.

The correct answer is option C because it is a standard IP ACL. The command "access-list 101 deny tvp any host 192.168.1.1" creates a standard IP ACL with the number 101. The "deny" statement means that any traffic from any source IP address with a destination IP address of 192.168.1.1 will be denied. The "tvp" keyword is not a valid keyword, but it does not affect the validity of the ACL as a standard IP ACL.

Option A, "access-list 110 permit any any" is an Extended IP ACL, not a Standard IP ACL. This ACL allows any traffic from any source to any destination, which is not recommended for security reasons.

Option B, "access-list 50 deny 192.168.1.1 0.0.0.255" is also an Extended IP ACL, not a Standard IP ACL. This ACL denies traffic from the source IP address 192.168.1.1 and any IP address in the range 192.168.1.1 to 192.168.1.255.

Option D, "access-list 2500 deny tcp any host 192.168.1.1 eq 22" is an Extended IP ACL, not a Standard IP ACL. This ACL denies any TCP traffic from any source to the destination IP address 192.168.1.1 on port 22 (SSH).