- Home
- Networking
- CCNA Routing and Switching 200-105
126.
IPv6 access control lists are configured in which of the following ways?
- A.Using ACL numbers 2300-2499
- B.Using ACL numbers 3000-3999
- C.Using ACL names to uniquely identify each ACL
- D.Using subinterfaces on the physical router's interface descriptor block
- Answer & Explanation
- Report
Answer : [C]
Explanation :
Explanation :
| IPv6 ACLs are names and do not use ACL numbers. |
127.
Which of the following statements is true about IPv6 ACLs?
- A.Cisco router interfaces can only have one IPv4 or one IPv6 ACLs applied in only one direction.
- B.Cisco router interfaces can have either an IPv4 or IPv6 ACL applied, but in both directions.
- C.Cisco router interfaces can have both IPv4 and IPv6 ACLs applied inbound and outbound on a single interface.
- D.Cisco router interfaces can have either an IPv4 or an IPv6 ACL applied, but only in one direction.
- Answer & Explanation
- Report
Answer : [C]
Explanation :
Explanation :
| IPv4 ACLs can be applied to a routed interface in the inbound and outbound direction. Similarly, IPv6 ACLs can be applied to a routed interface in the inbound and outbound direction. Therefore, it is possible to have a routed interface with four ACLs applied: two IPv4 ACLs (one inbound and one outbound) and two IPv6 ACLs (one inbound and one outbound). |
128.
Which of the following IPv6 ACL entries would match and permit IPv6 packets coming from the Internet destined for the 2001:0db8:1111:0001:0000:0000:0000:0000
prefix with a 64-bit prefix length?
- A.permit ipv6 any 2001:db8:1111:1::1
- B.permit ipv6 2001:db8:1111:1::/64 any
- C.permit ipv6 any 2001:db8:1111:1::1/128
- D.permit ipv6 any 2001:db8:1111:1::/64
- Answer & Explanation
- Report
Answer : [D]
Explanation :
Explanation :
| IPv6 ACLs use the any keyword to represent all possible IPv6 address (as in the whole Internet). The 2001:db8:1111:1::/64 prefix uses this syntax to represent any node on the network that has those first four hextets with the “/64” prefix length notation. |
129.
Which of the following packet header fields can be filtered using IPv6 extended
access control lists?
- A.TCP source and destination port number
- B.ICMPv6 type and code values
- C.IPv6 extension header numbers
- D.IPv6 flow label values
- E.All of the other answers are correct.
- Answer & Explanation
- Report
Answer : [E]
Explanation :
Explanation :
| IPv6 ACLs can filter on any field in the IPv6 header (including flow label, nextheader, etc.). IPv6 ACLs can filter ICMPv6 packets and IPv6 ACLs can filter on the TCP or UDP packets with various source or destination port numbers. |
130.
The implicit rules at the bottom of IPv6 ACLs are there to permit which of the following packets?
- A.Router Solicitation (RS) and Router Advertisement (RA) messages
- B.Neighbor Solicitation (NS) and Neighbor Advertisement (NA) messages
- C.All ICMPv6 messages on a LAN interface
- D.All IPv6 multicast packets on a LAN interface
- Answer & Explanation
- Report
Answer : [B]
Explanation :
Explanation :
| Neighbor Solicitation (NS) and Neighbor Advertisement (NA) messages are essential to the function of Neighbor Discovery Protocol (NDP) and establishment and maintenance of the IPv6 interface neighbor cache. If these packets were to be blocked, the neighbor cache entries on that interface would time out and affect reachability to the next-hop device. |
|
|
||||||||||||||||||||||||||||
