In access control lists, traffic that is not explicitly matched by a previous rule is denied. This is called the ________ _______ rule.

In access control lists, traffic that is not explicitly matched by a previous rule is denied. This is called the ________ _______ rule.

• A. Implicit deny rule
• B. Implicit allow rule
• C. Default deny rule
• D. Ingress deny rule

Answer: (A)

In ACLs, evaluation happens rule by rule in order, and once a packet matches a rule, its action is taken and processing stops. If no rule matches, the traffic is denied by default. This automatic denial of anything not explicitly allowed is called the implicit deny rule. It serves as a catch-all safeguard so only what you’ve explicitly permitted can pass. Some folks also call this a default deny, but the term used here is implicit deny.

In ACLs, evaluation happens rule by rule in order, and once a packet matches a rule, its action is taken and processing stops. If no rule matches, the traffic is denied by default. This automatic denial of anything not explicitly allowed is called the implicit deny rule. It serves as a catch-all safeguard so only what you’ve explicitly permitted can pass. Some folks also call this a default deny, but the term used here is implicit deny.