Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR) — Question 118

What is the result of applying this access control list?
ip access-list extended STATEFUL
10 permit tcp any any established
20 deny ip any any

Answer options

• A. TCP traffic with the URG bit set is allowed.
• B. TCP traffic with the SYN bit set is allowed.
• C. TCP traffic with the ACK bit set is allowed.
• D. TCP traffic with the DF bit set is allowed.

Correct answer: C

Explanation

The correct answer is C because the access control list permits TCP traffic that is part of an established connection, which includes packets with the ACK bit set. Options A, B, and D are incorrect because they refer to traffic that is not necessarily part of an established connection, which would be denied by the ACL rules.