nerdexam
Cisco

200-301 · Question #750

Which type of access list compares source and destination IP address?

The correct answer is B. extended. Extended access lists provide granular control over network traffic by evaluating both source and destination IP addresses, along with protocols and port numbers.

Submitted by jordan8· Mar 5, 2026Security Fundamentals

Question

Which type of access list compares source and destination IP address?

Options

  • Astandard
  • Bextended
  • CIP named
  • Dreflexive

How the community answered

(65 responses)
  • B
    95% (62)
  • C
    2% (1)
  • D
    3% (2)

Why each option

Extended access lists provide granular control over network traffic by evaluating both source and destination IP addresses, along with protocols and port numbers.

Astandard

Standard access lists only filter traffic based on the source IP address of the packet and cannot inspect destination IP addresses or port numbers.

BextendedCorrect

Extended access lists are designed to compare both the source IP address and the destination IP address of packets, enabling highly specific filtering based on where traffic originates and where it is headed, in addition to protocols and port numbers.

CIP named

IP named access lists are a method of identifying ACLs by an alphanumeric name rather than a number, but they can be either standard or extended and do not define a new type of filtering criteria.

Dreflexive

Reflexive access lists are a type of dynamic extended access list that allows return traffic for specific outbound sessions, but they are not a general type of list defined by the comparison of source and destination IPs for all filtering.

Concept tested: ACL types and filtering criteria

Source: https://www.cisco.com/c/en/us/td/docs/ios/security/sec_cfg_guide/12_4t/sec_cg_12_4t_book/sec_acl_cfg.html

Topics

#extended ACL#access control list#packet filtering#source and destination

Community Discussion

No community discussion yet for this question.

Full 200-301 Practice