While examining excessive traffic on the network, it is noted that all incoming packets on an interface appear to be allowed even though an IPv4 ACL is applied to the interface. Which two misconfigurations cause this behavior? (Choose two.)

A. The ACL is empty

B. A matching permit statement is too broadly defined

C. The packets fail to match any permit statement

D. A matching deny statement is too high in the access list

E. A matching permit statement is too high in the access list






 

Suggested Answer: BE

Community Answer: BE

Traffic might be permitted if the permit statement is too braid, meaning that you are allowing more traffic than what is specifically needed, or if the matching permit statement is placed ahead of the deny traffic. Routers will look at traffic and compare it to the ACL and once a match is found, the router acts accordingly to that rule.

This question is in 200-301 Cisco Certified Network Associate (CCNA) Exam
For getting Cisco Certified Network Associate (CCNA) Certificate





Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Cisco.
Trademarks, certification & product names are used for reference only and belong to Cisco.
The website does not contain actual questions and answers from Cisco's Certification Exam.