Which statement is true about applying multiple ACLs on the same interface?

Which statement is true about applying multiple ACLs on the same interface?

• A. The first ACL applies
• B. The last ACL applies
• C. Both ACLs are evaluated
• D. ACLs are ignored

Answer: (B)

When you attach ACLs to an interface, only one ACL per direction can be in effect at a time. If you apply another ACL in the same direction, the new one replaces the previous one. So the traffic is governed by the most recently applied access control list. Earlier ACLs aren’t consulted for packets after the last one has been applied. That’s why this statement is true: the last ACL that you apply on that interface direction determines what’s allowed or denied. If you need more granular control, you’d place all rules in a single ACL (or use different interfaces or directions), rather than stacking multiple ACLs on the same interface in the same direction. The other possibilities don’t fit because the interface isn’t evaluating multiple ACLs in sequence, and ACLs aren’t simply ignored. The active, last-applied ACL is the one that matters.

When you attach ACLs to an interface, only one ACL per direction can be in effect at a time. If you apply another ACL in the same direction, the new one replaces the previous one. So the traffic is governed by the most recently applied access control list. Earlier ACLs aren’t consulted for packets after the last one has been applied.

That’s why this statement is true: the last ACL that you apply on that interface direction determines what’s allowed or denied. If you need more granular control, you’d place all rules in a single ACL (or use different interfaces or directions), rather than stacking multiple ACLs on the same interface in the same direction.

The other possibilities don’t fit because the interface isn’t evaluating multiple ACLs in sequence, and ACLs aren’t simply ignored. The active, last-applied ACL is the one that matters.