Multiple choice

Which statement about standard ACLs is true?

  1. Standard ACLS must be numbered and cannot be named.

  2. They should be placed as close to the destination as possible.

  3. They can filter based on source and destination address as well as on source and destination port.

  4. When applied to an outbound interface, incoming packets are processed before they are routed to the outbound interface.
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Standard ACLs filter traffic based only on the source IP address, not destination address or ports. Because they're limited, best practice is to place them as close to the destination as possible to avoid blocking legitimate traffic from multiple sources. Extended ACLs, which can filter based on source and destination addresses/ports, should be placed close to the source. Standard ACLs can be either numbered or named, contrary to option A.

Keep practicing — related questions