Implementing and Configuring Cisco Identity Services Engine (SISE) — Question 167

An engineer is configuring web authentication and needs to allow specific protocols to permit DNS traffic.
Which type of access list should be used for this configuration?

Answer options

• A. extended ACL
• B. reflexive ACL
• C. numbered ACL
• D. standard ACL

Correct answer: A

Explanation

An extended ACL is the appropriate choice for filtering traffic based on protocols and ports, which is essential for allowing DNS. Reflexive ACLs are used for temporary connections, while numbered and standard ACLs provide less granularity in control, making them unsuitable for this scenario.