Answers to the Chapter 7 "Do I Know This Already?" Quiz 755
4
True or false: If all IP or IPX access list statements in a particular list define the deny
action, then the default action is to permit all other packets.
False. The default action at the end of any IP or IPX access list is to deny all other packets.
5
How many IP access lists of either type can be active on an interface at the same time?
Only one IP access list per interface, per direction. In other words, one inbound and one
outbound are allowed, but no more.
6
In a standard named IP access list with three statements, a no version of the first statement
is issued in configuration mode. Immediately following, another access list configuration
command is added for the same access list. How many statements are in the list now, and
in what position is the newly added statement?
Three statements will remain in the list, with the newly added statement at the end of the
list. The no deny | permit. . . command deletes only that single named access list
subcommand in named lists. However, when the command is added again, it cannot be
placed anywhere except at the end of the list.
7
In an IPX access list with five statements, a no version of the third statement is issued in
configuration mode. Immediately following, another access list configuration command is
added for the same access list. How many statements are in the list now, and in what
position is the newly added statement?
Only one statement will remain in the list: the newly added statement. The no access-list
x command deletes the entire access list, even if all the parameters in an individual
command are typed in when issuing the no version of the command.
8
Name all the items that a SAP access list can examine to make a match.
·
Network
·
IPX address (network and node)
·
Subsets of the first two using a wildcard
·
Service type
·
Server name
Many people would consider checking the network number and checking a full IPX
address as the same item. These functions are listed separately here only to make sure you
recall that both variations are possible.
9
Name all the items that a standard IPX access list can examine to make a match.
·
Source network
·
Source IPX address (network and node)
·
Subset of node part of address (using mask)
apA.fm Page 755 Monday, March 20, 2000 5:24 PM