CCNA Security - ip tcp intercept mode

[skk391]

Hi all,

Just going some research for my CCNA security exam and need some advise on
setting up tcp intercept mode.

I know about the two cmds such as

ip tcp intercept mode intercept
ip tcp intercept mode watch

in the real world I would need to configure a ACL i.e

access-list 110 permit tcp any 172.12.12.0 0.0.0.255

then apply this ACL ..
ip tcp intercept list 110

So this would stop any DOS type attacks to any machine on my internal network of 172.12.12.x ... is this correct?