Network Device Access Control and Infrastructure Security

5 important questions on Network Device Access Control and Infrastructure Security

What are 5 important types of ACLs used for packet filtering?

1. Numbered standard ACLs (Source network, entries 1-99 and 1300-1999)

2. Numbered extended ACLs (Source, Destination, Protocol, Port, etc. Entries 100-199 and 2000-2699.

3. Named ACLs (Allow standard and extended ACLs to be given names instead of numbers)

4. Port ACLs or PACLs (can use standard, extended, named and named extended MAC ACLs to filter traffic on Layer 2 switchports)

5. VLAN ACLs or VACLs (can use standard, extended, named and named extended MAC ACLs to filter traffic on VLANs.

What kind of MASK is used in an ACL?

A Wildcard MASK which is an inverted subnet MASK

In zone-based firewall (ZBFW) what are the 2 system-built zones?

Self and Default
  • Higher grades + faster learning
  • Never study anything twice
  • 100% sure, 100% understanding
Discover Study Smart

What is the Default zone?

The zone where interfaces are placed automatically that are not member of another zone.

What are 7 measures of hardening that are recommended?

1. Disable topology discovery tools (CDP and LLDP)

2. Enable TCP keepalive (To end orphaned sessions)

3. Disable IP Redirect

4. Disable Proxy ARP

5. Disable Autoconfig (TFTP. Service configuration)

6. Disable Maintenance Operation Protocol (MOP) service (Not needed, should be disabled globally.)

7. Disable Packet Assembler/Disassembler (PAD) service (For X.25 and is not needed)

The question on the page originate from the summary of the following study material:

  • A unique study and practice tool
  • Never study anything twice again
  • Get the grades you hope for
  • 100% sure, 100% understanding
Remember faster, study better. Scientifically proven.
Trustpilot Logo