Multiple choice

Refer to the exhibit. A network administrator configures a standard access control list on Router1 to prohibit traffic from the 192.168.0.0/24 network from reaching the Internet. The access control list also permits traffic from the 192.168.0.0/24 network to reach the 192.168.1.0/24 network. On which interface and in which direction should the access control list be applied?

  1. Interface Fa0/0, inbound

  2. Interface Fa0/0, outbound

  3. Interface S0/0/0, inbound

  4. Interface S0/0/0, outbound

Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

The ACL must filter traffic as it leaves toward the internet. Applying it outbound on S0/0/0 (the WAN interface to the internet) allows the ACL to examine traffic before it leaves the router. The permit statement for 192.168.1.0/24 is processed first, allowing that internal traffic, while the deny statement for internet traffic takes effect after. Applying on Fa0/0 would block internal-to-internal traffic.