Network Access Control Lists (ACLs) Quiz Answers 1. What is one of the primary functions of Network Segmentation in ACLs? A. To prioritize the flow of traffic. B. To filter traffic based on IP addresses. C. To restrict bandwidth for authorized users. D. To isolate different parts of a network. Answer: To isolate different parts of a network. (D) Network Segmentation helps reduce the impact of security breaches by isolating various network parts. 2. What is a common drawback of using Access Control Lists (ACLs)? A. They can lead to reduced network performance. B. They automatically audit rules for accuracy. C. They simplify network management significantly. D. The configuration can be complex and time-consuming. Answer: The configuration can be complex and time-consuming. (D) Configuring ACLs can be complicated, which makes it difficult especially for complex networks. 3. Which of the following is a best practice when configuring ACLs? A. Use vague and broad rules. B. Regularly delete all configured rules. C. Prioritize rules randomly. D. Document the ACL rules clearly. Answer: Document the ACL rules clearly. (D) Documenting ACLs clearly helps in managing and auditing the rules effectively. 4. Layer 2 ACLs primarily control access based on which of the following? A. IP addresses and transport layer ports. B. Protocol types such as HTTP or FTP. C. Media Access Control (MAC) addresses. D. User account permissions. Answer: Media Access Control (MAC) addresses. (C) Layer 2 ACLs operate at the data link layer and focus on MAC addresses to manage network access. 5. What could be a consequence of improperly configured ACLs? A. Elimination of all security breaches. B. Improved network performance. C. Blocking of legitimate traffic. D. Automatic management of network rules. Answer: Blocking of legitimate traffic. (C) Improper configurations may inadvertently prevent valid traffic from passing through the network. 6. What is the primary focus of standard ACLs? A. Port and protocol filtering B. Application-specific traffic management C. Destination IP addresses D. Source IPv4 addresses Answer: Source IPv4 addresses (D) Standard ACLs primarily focus on source IPv4 addresses for basic source filtering. 7. Which of the following statements is true regarding extended ACLs? A. They can filter traffic using multiple criteria including ports and protocols. B. They only filter based on source ports. C. They are identical to standard ACLs in functionality. D. They operate at both network and application layers. Answer: They can filter traffic using multiple criteria including ports and protocols. (A) Extended ACLs provide more granular control by using multiple criteria including source and destination IP addresses, ports, and protocols. 8. What happens if a packet matches an entry in an ACL? A. The packet is automatically forwarded to all network devices. B. The packet is logged and processed by the next entry. C. The entry is removed from the ACL. D. The action associated with that entry is taken, and further entries are ignored. Answer: The action associated with that entry is taken, and further entries are ignored. (D) Once a packet matches an entry, the associated action is taken, and no further entries are processed. 9. Why is regular review and maintenance of ACLs important? A. To increase network bandwidth. B. To ensure compliance with global standards. C. To adapt to evolving security threats and ensure effectiveness. D. To prevent any filtering of traffic. Answer: To adapt to evolving security threats and ensure effectiveness. (C) Regular review and maintenance are necessary for ACLs to remain effective against evolving security threats. 10. Which layer(s) can ACLs be implemented on? A. Layer 2, Layer 3, and Layer 4 B. Only Layer 2 C. Layer 3 and Layer 4 D. Layer 2 and Layer 4 Answer: Layer 2, Layer 3, and Layer 4 (A) ACLs can be implemented at Layer 2 (Data Link Layer), Layer 3 (Network Layer), and Layer 4 (Transport Layer). 11. What is a potential consequence of improper ACL configuration? A. Uniform access granted to all users. B. Blocking legitimate traffic or allowing unwanted traffic. C. Increased network speed. D. Complete elimination of network security. Answer: Blocking legitimate traffic or allowing unwanted traffic. (B) Improper configuration of ACLs can lead to unintended consequences such as blocking legitimate traffic or allowing unwanted traffic. 12. Which component of an ACL specifies whether a packet is allowed or denied? A. The sequential order of ACL entries B. The network device type C. The protocol used in the network D. The action of each ACL entry Answer: The action of each ACL entry (D) Each ACL entry specifies an action, either permitted or denied, which determines the packet's fate. 13. In the context of ACLs, what is the purpose of filtering traffic based on criteria such as IP addresses or ports? A. To limit the number of connected devices. B. To enhance data encryption during transmission. C. To control network traffic and improve overall security. D. To simplify network administration. Answer: To control network traffic and improve overall security. (C) Filtering traffic based on various criteria helps control network traffic and enhances security by preventing unauthorized access.