ccna interview questions and answers

Part - 14 CCNA Interview Questions and Answers

66 When using access lists, what does a Cisco router check first?

A. To see if the packet is routable or bridgeable

B. The destination address

C. The source address

D. The packet contents

Ans A

The first thing checked is to see if the packet is routable or bridgeable. If it is not, the packet will
be dropped.

67 How many access lists are allowed per interface?

A. One per port, per protocol

B. Two per port, per protocol

C. Unlimited D. Router interface +1 per port.

Ans: A

Only one access list is allowed per interface. An access list must have conditions that test true for all packets that use the access list.

68 What do the following commands accomplish? access-list 1 deny 172.16.4.0 0.0.0.255 access-list 1 permit any interface ethernet 0 IP access-group 1 out

A. This will block traffic from subnet 172.16.4.0 and allow all other traffic.

B. This will allow traffic from subnet 172.16.4.0 and block all other traffic.

C. All traffic is allowed.

D. All traffic is blocked.

Ans: A

This will block traffic from subnet 172.16.4.0 and allow all other traffic. The first statement "access-list 1 deny 172.16.4.0 0.0.0.255" will deny access to the subnet 172.16.4.0.

69 What do the following statements in an extended access list accomplish? access-list 101 deny TCP 172.16.4.0 0.0.0.255 172.16.3.0 0.0.0.255 eq 21 access-list 101 deny TCP 172.16.4.0 0.0.0.255 172.16.3.0 0.0.0.255 eq 20 access-list 101 permit TCP 172.16.4.0 0.0.0.255 0.0.0.0 255.255.255.255

A. This will block ftp traffic.

B. This will block http traffic.

C. This will permit ftp traffic.

D. This will permit tftp traffic.

Ans: A

This will block ftp traffic since ftp uses ports 20 and 21.

70 Access lists are numbered. Which of the following ranges could be used for an IP access list?

A. 600 - 699

B. 100 - 199

C. 1 - 99

D. 800 - 899

E. 1000 - 1099

Answer: B & C

AppleTalk access lists use numbers in the 600 - 699 range. IP uses 1 - 99 for standard access lists or 100-199 for extended access lists. IPX uses 800 - 899 or 900 - 999 for extended access lists. IPX SAP filters use 1000 - 1099.