Chapter 22

1. A and C. An IP ACL can be configured to match the exact IP address by using the host keyword or using a /32 subnet mask for the source address. This can be done in one entry.

2. D. When creating an IOS ACL, you use the wildcard mask to match the ACL entry. The wildcard mask for 255.255.255.0 is 0.0.0.255.

3. E. When creating an IOS ACL, you use the wildcard mask to match the ACL entry. The wildcard mask for 255.255.240.0 is 0.0.15.255.

4. A. In an ACL the first match is used; in this case, 1.1.1.1 would match 1.0.0.0/8.

5. A. To permit only host 10.1.1.1 to host 192.168.1.3 on port 80 or the Web, you must use the host keyword or a /32 subnet address. Using the host keyword will only allow a host to talk to a host on a particular ...

Get CCNA Data Center DCICN 640-911 Official Cert Guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.