200-150 · Question #9
Which two terms can take the place of the wildcard mask in an ACL?
The correct answer is C. host E. any. In Cisco ACLs, two shorthand keywords replace wildcard masks to simplify address matching for single hosts and all addresses.
Question
Which two terms can take the place of the wildcard mask in an ACL?
Options
- Aeq
- Bdeny
- Chost
- Dall
- Eany
How the community answered
(43 responses)- A5% (2)
- B2% (1)
- C91% (39)
- D2% (1)
Why each option
In Cisco ACLs, two shorthand keywords replace wildcard masks to simplify address matching for single hosts and all addresses.
'eq' is an operator used in extended ACLs to match a specific Layer 4 port number, not a substitute for a wildcard mask.
'deny' is an ACL action keyword that specifies what to do with a matched packet, not a wildcard mask replacement.
The keyword 'host' replaces the wildcard mask 0.0.0.0, meaning the ACL matches exactly one specific IP address with no bits wildcarded. It is a shorthand that makes single-host entries more readable.
'all' is not a valid Cisco IOS or NX-OS ACL keyword and cannot replace a wildcard mask.
The keyword 'any' replaces the address and wildcard combination 0.0.0.0 255.255.255.255, matching all IP addresses regardless of value. It is the standard shorthand for permitting or denying all traffic.
Concept tested: ACL wildcard mask shorthand keywords host and any
Source: https://www.cisco.com/c/en/us/support/docs/security/ios-firewall/23602-confaccesslists.html
Topics
Community Discussion
No community discussion yet for this question.