Summary Challenge Questions
總結挑戰問題
Which application of an ACL is indicated by the statement "ACLs can permit or deny user access to FTP or HTTP servers"?「ACL 可以允許或拒絕使用者存取 FTP 或 HTTP 伺服器」這句敘述,說明的是 ACL 的哪一種應用?
Which statement about ACLs is true?關於 ACL,下列哪項敘述正確?
The ACL statement has the matching criteria specified as 192.168.122.128 0.0.0.63. Which two IPv4 addresses would match the criteria? (Choose two.)此 ACL 敘述的比對條件指定為 192.168.122.128 0.0.0.63。哪兩個 IPv4 位址會符合此條件?(選兩項。)
Which range of addresses is included in the matching criteria 10.220.56.0 0.0.7.255?比對條件 10.220.56.0 0.0.7.255 涵蓋哪個位址範圍?
Which three ACL statements are written correctly? (Choose three.)下列哪三筆 ACL 敘述的寫法正確?(選三項。)
Which two numbers could you use in the numbered configuration method, or a number as a name in the named configuration method, to configure standard IPv4 access lists? (Choose two.)設定標準 IPv4 存取清單時,在編號設定方式中可使用哪兩個編號,或在具名設定方式中可將該編號當作名稱使用?(選兩項。)
The administrator wants to allow only PC1 to have remote access to the file server, using SSH. Other devices from the 192.168.10.0/24 network should not be allowed SSH remote access, but other traffic should be permitted. Where would you place this access list for most efficient implementation?管理員只想讓 PC1 能以 SSH 遠端存取檔案伺服器。192.168.10.0/24 網路中的其他裝置不應被允許使用 SSH 遠端存取,但其他流量應被允許。為了最有效率地實作,你會將此存取清單放在哪裡?
A network administrator is writing a standard IPv4 ACL that will deny traffic from the 172.16.0.0/16 network and permit all other traffic. Which two commands should be used? (Choose two.)某網路管理員正在撰寫一個標準 IPv4 ACL,用來拒絕來自 172.16.0.0/16 網路的流量,並允許其他所有流量。應使用哪兩個指令?(選兩項。)
Which three commands would enable you to enter extended ACL statements on a router? (Choose three.)下列哪三個指令可讓你在路由器上輸入延伸 ACL 敘述?(選三項。)
The network administrator is reviewing the ACL 15 configuration on a router. The figure shows the output of the
show access-lists command, where the administrator notices that the deny statement 20 is typed with the wrong wildcard mask of 0.0.0.255. The administrator wants to change it to wildcard mask 0.0.255.255. Which sequence of commands should the administrator use to modify the ACL?網路管理員正在檢閱路由器上的 ACL 15 設定。下圖顯示 show access-lists 指令的輸出,管理員發現第 20 筆 deny 敘述的萬用字元遮罩打錯,寫成 0.0.0.255。管理員想將其改為萬用字元遮罩 0.0.255.255。管理員應使用哪一組指令序列來修改此 ACL?Referring to the figure, the security policy for the network requires you to prevent PC2 from accessing the network 192.168.10.0/24. The access list shown in the figure is configured on router R1. Which option would correctly apply the access list?參考圖示,此網路的安全政策要求你必須防止 PC2 存取網路 192.168.10.0/24。圖中的存取清單已設定在路由器 R1 上。下列哪個選項能正確套用此存取清單?