ACL Types & Classification 1 — Questions and Answers

Question 1: What is the primary function of an Access Control List (ACL)?

Control network traffic permissions (Correct answer)
Monitor server uptime
Encrypt data packets
Store user credentials

Correct answer: Control network traffic permissions

The primary function of an Access Control List (ACL) is to filter network traffic by defining rules that permit or deny packets based on various criteria. ACLs are configured on network devices like routers and firewalls to control which users or devices can access specific network resources. This mechanism is fundamental for enforcing network security policies and managing traffic flow.

Question 2: Which type of ACL filters traffic based on IP addresses and protocols?

Extended ACL (Correct answer)
Standard ACL
Dynamic ACL
Role-Based ACL

Correct answer: Extended ACL

An Extended ACL provides granular control over network traffic by filtering packets based on a wider range of criteria compared to a Standard ACL. It can filter traffic using source and destination IP addresses, specific protocols (like TCP, UDP, ICMP), and even port numbers. This allows for highly specific and flexible security policies, enabling precise control over network access and services.

Question 3: What is a key characteristic of a Standard ACL?

Filters by source IP only (Correct answer)
Filters by source and destination IP
Filters by protocols and ports
Applies dynamic access policies

Correct answer: Filters by source IP only

Standard ACLs are a basic type of access control list used in networking. Their key characteristic is that they can only filter traffic based on the source IP address of the packet. This makes them simpler to configure for basic access control, but less granular than other ACL types.

Question 4: Where is an Extended ACL typically applied in a network?

Near the source of traffic (Correct answer)
Near the destination of traffic
On the ISP gateway
On the client device

Correct answer: Near the source of traffic

Extended ACLs offer granular control, filtering traffic based on source IP, destination IP, protocols, and port numbers. Applying an Extended ACL near the source of traffic prevents unwanted traffic from consuming network resources unnecessarily as it traverses the network. This 'filter early' approach optimizes network performance and security.

Question 5: What distinguishes a Dynamic ACL from other types of ACLs?

Requires authentication before granting access (Correct answer)
Filters only by IP address
Always allows all traffic
Does not support time-based rules

Correct answer: Requires authentication before granting access

Dynamic ACLs, also known as Lock-and-Key ACLs, are unique because they are not static. They require a user to authenticate, typically via Telnet or SSH, before a temporary ACL entry is dynamically created to allow specific traffic. This provides on-demand access control, enhancing security by only opening ports when needed and for authenticated users.

Question 6: How does a Role-Based ACL differ from other ACL types?

Permissions are assigned based on user roles (Correct answer)
Permissions are assigned based on IP address
Only blocks external traffic
Does not support authentication

Correct answer: Permissions are assigned based on user roles

Role-Based ACLs (RBACLs) differ from traditional ACLs by associating permissions with specific user roles rather than individual users or IP addresses. This approach simplifies management, as changes to a role's permissions automatically apply to all users assigned that role. It provides a more scalable and organized way to manage access control in complex environments.

ACL Types & Classification 1

What is the primary function of an Access Control List (ACL)?