CCNA Cisco Certified Network Associate Study Guide - FTP Server

476 Chapter 9 � Managing Traffic with Access Lists
11. B, C. You can see the access lists with the show ip access-list
command or the show access-list # command.
12. D. IP extended lists use the range from 100 to 199.
13. B. Remember to first look for the access list numbers. Since all of the
access lists are using 101, they are all set for IP extended access lists.
The second thing to look for is the protocol. Only one list is using
TCP, which is needed to access the FTP protocol.
14. B. Standard IPX uses the range 800–899 and extended IPX lists use
the range 900–999.
15. D. –1 is a wildcard in the IPX access lists.
16. B, C, D. The command show interface is wrong because it will not
give you any access list information. Show ip interface, show run,
and show access-list will give you monitoring information about
access lists.
17. D. The command access-list 110 permit ip any any is used to
specify and permit all traffic. The command 0.0.0.0 255.255.255
.255 is the same as the any command.
18. C. This is a standard IP access list that only filters on source IP
addresses. The number range for IP access list is 1–99. The command
to place an IP access list on an interface is ip access-group. Since the
question specified incoming traffic, only Answer C works.
19. B. Cisco’s rule of thumb states that standard lists should be placed
closest to the source, and extended lists should be placed closest to the
destination.
20. C. Cisco’s rule of thumb states that standard lists should be placed
closest to the source and extended lists should be placed closest to the
destination.