CompTIA Network+ Practice Test

When managing ACLs, what should be done before editing an existing ACL?

1. Disable it on the interface

2. Change the port state to forward

3. Log all current activities

4. Reboot the device

The correct answer is: Disable it on the interface

When managing Access Control Lists (ACLs), disabling the ACL on the interface before editing it is a crucial step. This is important because it prevents any potential disruptions in network traffic while changes are being made. When an ACL is actively enforcing rules, modifying it can lead to unintended consequences, such as blocking legitimate traffic or allowing unauthorized access, which could compromise network security or disrupt services. By disabling the ACL, you ensure that no traffic is affected while you make your edits. Once the changes are complete and tested, the ACL can be re-enabled, allowing the new rules or permissions to take effect without impacting ongoing connections. Changing the port state to forward pertains more to spanning tree protocol operations and doesn't directly relate to ACL modifications. Logging current activities could be useful for auditing purposes but does not address the immediate concern of managing active network rules during changes. Rebooting the device is generally unnecessary and disruptive, as most ACL changes can be made live without requiring a reboot. Therefore, disabling the ACL is the best practice to ensure a smooth and secure editing process.