nerdexam
Cisco

200-301 · Question #1130

Refer to the exhibit. This ACL is configured to allow client access only to HTTP, HTTPS, and DNS services via UDP. The new administrator wants to add TCP access to the ONS service. Which configuration

The correct answer is B. ip access-list extended Services. To efficiently add new entries to an existing extended access control list (ACL), the administrator should enter the ACL configuration mode for the specified ACL name.

Submitted by omar99· Mar 5, 2026Security Fundamentals

Question

Refer to the exhibit. This ACL is configured to allow client access only to HTTP, HTTPS, and DNS services via UDP. The new administrator wants to add TCP access to the ONS service. Which configuration updates the ACL efficiently?

Exhibits

200-301 question #1130 exhibit 1
200-301 question #1130 exhibit 2

Options

  • Ano ip access-list extended Services
  • Bip access-list extended Services
  • Cip access-list extended Services
  • Dno ip access-list extended Services

How the community answered

(44 responses)
  • A
    5% (2)
  • B
    70% (31)
  • C
    9% (4)
  • D
    16% (7)

Why each option

To efficiently add new entries to an existing extended access control list (ACL), the administrator should enter the ACL configuration mode for the specified ACL name.

Ano ip access-list extended Services

`no ip access-list extended Services` deletes the entire ACL, which is disruptive and inefficient as all existing rules would need to be reconfigured.

Bip access-list extended ServicesCorrect

The command `ip access-list extended Services` enters the configuration mode for the existing 'Services' extended ACL, allowing new permit or deny statements to be appended to the ACL without deleting any existing rules. This is the most efficient method for updating an ACL as it avoids service disruption.

Cip access-list extended Services

This option would first enter the ACL configuration mode but then immediately delete the ACL with `no ip access-list extended Services`, making it ineffective for adding rules.

Dno ip access-list extended Services

This option first deletes the entire ACL with `no ip access-list extended Services` before attempting to add new entries, which is inefficient and causes service interruption for all traffic previously handled by the ACL.

Concept tested: Adding rules to Cisco extended ACLs

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr_nat/configuration/xe-16/nat-xe-16-book/ipaddr-acl.html

Topics

#Cisco ACLs#ACL modification#DNS traffic filtering#TCP/UDP ports

Community Discussion

No community discussion yet for this question.

Full 200-301 Practice