🎴 Flashcard Mode
CCNA Practice Test - 25
A network administrator needs to allow traffic through the firewall router for sessions that originate from within the company network, but the administrator must block traffic for sessions that originate outside the network of the company. What type of ACL is most appropriate?
Reflexive ACLs filter IP traffic based on session state - they allow outbound traffic from internal hosts and dynamically create temporary inbound rules to allow the return traffic. This permits sessions originating from inside the network while blocking external-initiated connections. Dynamic ACLs (option A) require user authentication, port-based ACLs (option B) filter by port numbers, and time-based ACLs (option D) activate based on time schedules. Reflexive ACLs are designed specifically for this outbound-initiated traffic scenario.