Multiple choice

Refer to the exhibit. Which statement is true about ACL 110 if ACL 110 is applied in the inbound direction on S0/0/0 of R1?

  1. It will deny TCP traffic to the Internet if the traffic is sourced from the 172.22.10.0/24 network.

  2. It will not allow TCP traffic coming from the Internet to enter the network 172.22.10.0/24.

  3. It will allow any TCP traffic from the Internet to enter the network 172.22.10.0/24.

  4. It will permit any TCP traffic that originated from network 172.22.10.0/24 to return inbound on the S0/0/0 interface.
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

ACL 110 permits TCP traffic from 172.22.10.0/24 and denies all other TCP traffic. When applied inbound on S0/0/0, it allows return traffic for sessions that originated from the internal network 172.22.10.0/24. This is because stateful firewalls or ACLs with established keyword permit return traffic for outbound-initiated connections - the ACL allows traffic FROM that network to return inbound.

Keep practicing — related questions