Page 543

Answers to Review Questions

499

Answers to Review Questions

B. Standard IP access lists use the numbers 199 and filter based on
source IP address only.

E. IP extended lists use source and destination IP addresses, Network
layer protocol files, and port fields in the Transport layer header.

C. The mask 0.0.255.255 tells the router to match the first two octets
and that the last two octets can be any value.

B, D. The wildcard 0.0.0.0 tells the router to match all four octets. The
wildcard command can be replaced with the host command.

A. The first thing to check in a question like this is the access-list
number. Right away, you can see that the second option is wrong
because it is using a standard IP access-list number. The second thing
to check is the protocol. If you are filtering by upper-layer protocol,
then you must be using either UDP or TCP; this eliminates the fourth
option. The second and last answers have the wrong syntax.

C. Only

the

show

interface

command will tell you which ports

have access lists applied.

show

access-lists

will not show you which

interfaces have an access list applied.

C. The

show

access-lists

command will allow you to view the

entire contents of all access lists, but will not show you to which inter-
faces the access lists are applied.

C. The extended access list range is 100199, so the access-list number
of 100 is valid. Telnet uses TCP, so the protocol TCP is valid. Now,
you just need to look for the source and destination address. Only the
third option has the correct sequence of commands.

D. Extended IP access lists use numbers from 100199 and filter
based on source and destination IP address, protocol number, and
port number. The command

0.0.0.0 255.255.255.255

is the same

as the

any

command. The reason the last option is correct is because of

the second line that "permits IP any any;" the third answer does not.

10.

B. You don't add the

out

parameters at the end of the list with

SAP access lists.

www.sybex.com