CCNP Security Question of the Week: Default Behavior of an Access List

What is the default behavior of an access list on the Cisco ASA security appliance?

A. It will permit or deny traffic based on the access-list.
B. It will permit or deny all traffic on a specific interface.
C. An access group must be configured before the access list will take effect for traffic filtering.
D. It will allow all traffic to pass.

Reveal Answer

Answer: C.

Like an IOS router, an access list has no effect until it is applied.  Use the access group command to reference the access list to apply it.

 

Related Resources
Cisco White Papers

Related Course
CCNP Security e-Camp

CCNP Security Question of the Week Series

• CCNP Security Question of the Week: Cisco ASA Security Context
• CCNP Security Question of the Week: Authenticating ASDM Users
• CCNP Security Question of the Week: Layer 5–7 Policy Maps
• CCNP Security Question of the Week: 802.1X
• CCNP Security Question of the Week: IPS Updates
• CCNP Security Question of the Week: IPsec VPN Tunnels
• CCNP Security Question of the Week: AnyConnect VPN Client
• CCNP Security Question of the Week: ASA AIP-SSM and ASA AIP-SSC
• CCNP Security Question of the Week: Disable DHCP Server Service
• CCNP Security Question of the Week: Cisco ASA Security Appliance Access List
• CCNP Security Question of the Week: Network Address Translation
• CCNP Security Question of the Week: Harden a Switch
• CCNP Security Question of the Week: SSH Login
• CCNP Security Question of the Week: Packet-Tracer Command
• CCNP Security Question of the Week: SSL Ciphers
• CCNP Security Question of the Week: VLAN Hopping
• CCNP Security Question of the Week: DHCP Server Service
• CCNP Security Question of the Week: Default Behavior of an Access List

from
CERTIVIEW