nerdexam
Cisco

210-260 · Question #97

Which statement about extended access lists is true?

The correct answer is B. Extended access lists perform filtering that is based on source and destination and are most. 1) Able Restrict, deny & filter packets by Host Ip or subnet only. 2) Best Practice is put Std. ACL restriction near from Source Host/Subnet (Interface-In-bound). 3) No Protocol based restriction. (Only HOST IP). 1) More flexible then Standard ACL. 2) You can filter packets by…

Secure Routing and Switching

Question

Which statement about extended access lists is true?

Options

  • AExtended access lists perform filtering that is based on source and destination and are most
  • BExtended access lists perform filtering that is based on source and destination and are most
  • CExtended access lists perform filtering that is based on destination and are most effective when
  • DExtended access lists perform filtering that is based on source and are most effective when

How the community answered

(35 responses)
  • A
    9% (3)
  • B
    86% (30)
  • C
    3% (1)
  • D
    3% (1)

Explanation

  1. Able Restrict, deny & filter packets by Host Ip or subnet only. 2) Best Practice is put Std. ACL restriction near from Source Host/Subnet (Interface-In-bound). 3) No Protocol based restriction. (Only HOST IP). 1) More flexible then Standard ACL. 2) You can filter packets by Host/Subnet as well as Protocol/TCPPort/UDPPort. 3) Best Practice is put restriction near form Destination Host/Subnet. (Interface-Outbound)

Topics

#extended ACL#access control list#source destination filtering#ACL placement

Community Discussion

No community discussion yet for this question.

Full 210-260 Practice