ACL Debugging Quiz

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering Security Troubleshooting

What you'll be asked

  1. When an Access Control List (ACL) is applied to an interface, what is the default behavior for traffic that does not match any defined permit or deny statements?
  2. You are troubleshooting a connectivity issue where users in the 192.168.10.0/24 subnet cannot access the server at 10.1.1.50. You see an ACL entry: 'deny ip 192.168.10.0 0.0.0.255 host 10.1.1.50'. What is the most effective way to allow this specific traffic while maintaining security?
  3. Which command is most useful for verifying which specific ACL line is dropping packets in real-time on a Cisco router?
  4. You have an Extended ACL applied to an interface. You notice that traffic is being blocked, but 'show access-lists' shows zero matches for your permit statements. What is the most likely cause?
  5. Consider an ACL with the following sequence: 10 permit ip 10.1.1.0 0.0.0.255 any, 20 deny ip 10.1.1.5 0.0.0.0 any. How will a packet originating from 10.1.1.5 be handled?

Answers and explanations come after you submit.