200-301 · Question #1130
Refer to the exhibit. This ACL is configured to allow client access only to HTTP, HTTPS, and DNS services via UDP. The new administrator wants to add TCP access to the ONS service. Which configuration
The correct answer is B. ip access-list extended Services. To efficiently add new entries to an existing extended access control list (ACL), the administrator should enter the ACL configuration mode for the specified ACL name.
Question
Exhibits
Options
- Ano ip access-list extended Services
- Bip access-list extended Services
- Cip access-list extended Services
- Dno ip access-list extended Services
How the community answered
(44 responses)- A5% (2)
- B70% (31)
- C9% (4)
- D16% (7)
Why each option
To efficiently add new entries to an existing extended access control list (ACL), the administrator should enter the ACL configuration mode for the specified ACL name.
`no ip access-list extended Services` deletes the entire ACL, which is disruptive and inefficient as all existing rules would need to be reconfigured.
The command `ip access-list extended Services` enters the configuration mode for the existing 'Services' extended ACL, allowing new permit or deny statements to be appended to the ACL without deleting any existing rules. This is the most efficient method for updating an ACL as it avoids service disruption.
This option would first enter the ACL configuration mode but then immediately delete the ACL with `no ip access-list extended Services`, making it ineffective for adding rules.
This option first deletes the entire ACL with `no ip access-list extended Services` before attempting to add new entries, which is inefficient and causes service interruption for all traffic previously handled by the ACL.
Concept tested: Adding rules to Cisco extended ACLs
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr_nat/configuration/xe-16/nat-xe-16-book/ipaddr-acl.html
Topics
Community Discussion
No community discussion yet for this question.

