Cisco Certified Network Associate (CCNA) Practice Exam

What command do you use to permit or deny a host in a standard named ACL?

1. permit/deny host SOURCE IP ADDRESS

2. permit/deny host IP ADDRESS AND WILDCARD MASK

3. permit/deny host IP ADDRESS

4. permit/deny any

The correct answer is: permit/deny host SOURCE IP ADDRESS

The command to permit or deny a host in a standard named Access Control List (ACL) is correctly identified as the one that specifies the source IP address directly in conjunction with the permit or deny keyword. When configuring a standard named ACL, which is primarily used to filter traffic based on the source IP address, the syntax "permit/deny host SOURCE IP ADDRESS" specifies that traffic from a specific host is allowed or blocked. By explicitly using the "host" keyword followed by the actual IP address of the device, the ACL configuration clearly defines the action to be taken on packets originating from that address. This approach allows for precise control in the network, as it targets only the specified device, ensuring that any traffic either from or to that IP address is managed accordingly. Using the "host" keyword indicates that the ACL is referencing a single IP address, simplifying the definition and implementation of the rules in the ACL. The other options either include an inaccurate syntax or represent broader or lesser-defined commands that do not align specifically with the requirements for controlling host-level traffic within a standard named ACL context.