Which statement is a guideline to be followed when designing access control lists?
- Because ACL tests are executed in order, they should be organized from the most general condition to the most specific.
- Because ACL tests are executed in order, they should be organized from the most specific condition to the most general.
- Because all statements in an ACL are evaluated before they are executed, an explicit deny any statement must be written for an ACL to function properly.
- Because all statements in an ACL are evaluated before they are executed, an explicit permit any statement must be written for an ACL to function properly.
Explanation: An ACL is executed in order of the statements. The most specific condition must be examined before the more general conditions. Otherwise, the packet might pass the test condition of the general condition and never be examined by the more specific condition.
Exam with this question: EWAN v4 Chapter 5 Check Your Understanding: Access Control Lists
Exam with this question: CCNA 4 Exploration v4.0 Chapter 5 Quiz
Please login or Register to submit your answer