200-301 · Question #750
Which type of access list compares source and destination IP address?
The correct answer is B. extended. Extended access lists provide granular control over network traffic by evaluating both source and destination IP addresses, along with protocols and port numbers.
Question
Which type of access list compares source and destination IP address?
Options
- Astandard
- Bextended
- CIP named
- Dreflexive
How the community answered
(65 responses)- B95% (62)
- C2% (1)
- D3% (2)
Why each option
Extended access lists provide granular control over network traffic by evaluating both source and destination IP addresses, along with protocols and port numbers.
Standard access lists only filter traffic based on the source IP address of the packet and cannot inspect destination IP addresses or port numbers.
Extended access lists are designed to compare both the source IP address and the destination IP address of packets, enabling highly specific filtering based on where traffic originates and where it is headed, in addition to protocols and port numbers.
IP named access lists are a method of identifying ACLs by an alphanumeric name rather than a number, but they can be either standard or extended and do not define a new type of filtering criteria.
Reflexive access lists are a type of dynamic extended access list that allows return traffic for specific outbound sessions, but they are not a general type of list defined by the comparison of source and destination IPs for all filtering.
Concept tested: ACL types and filtering criteria
Source: https://www.cisco.com/c/en/us/td/docs/ios/security/sec_cfg_guide/12_4t/sec_cg_12_4t_book/sec_acl_cfg.html
Topics
Community Discussion
No community discussion yet for this question.