N10-005 · Question #738
Which of the following should the last line of an ACL normally contain?
The correct answer is D. Implicit deny. Access Control Lists process rules sequentially from top to bottom. If a packet matches a rule, that rule is applied and processing stops. If no rule matches, the default behavior at the end of the list kicks in. Most networking devices (especially Cisco IOS) append an…
Question
Which of the following should the last line of an ACL normally contain?
Options
- AExplicit allow
- BStatically routed
- CRandom access
- DImplicit deny
How the community answered
(30 responses)- A7% (2)
- B3% (1)
- C3% (1)
- D87% (26)
Explanation
Access Control Lists process rules sequentially from top to bottom. If a packet matches a rule, that rule is applied and processing stops. If no rule matches, the default behavior at the end of the list kicks in. Most networking devices (especially Cisco IOS) append an invisible 'implicit deny all' as the final entry, meaning any traffic not explicitly permitted by a prior rule is automatically blocked. This is a fundamental security principle - default-deny - ensuring that nothing is allowed unless it is explicitly authorized.
Topics
Community Discussion
No community discussion yet for this question.