Which of the following is true about extended IP ACLs?
A) the 'established' keyword is not available except on standard ACLs
B) you can apply multiple outbound ACLs on a single interface
C) the default inverse mask for the source is 0.0.0.0
D) they should be applied to an interface close to the traffic source

Question

Quizplus · Accepted Answer

Extended IP ACLs should be applied to an interface close to the traffic source. This enables the router to filter traffic before it traverses unnecessary network segments. Option A is incorrect because the 'established' keyword can be used with extended IP ACLs. Option B is also incorrect because only one outbound ACL can be applied to a single interface. Option C is incorrect because the default inverse mask for the source is 0.0.0.0 only in standard IP ACLs, not in extended IP ACLs.

Which of the Following Is True About Extended IP ACLs