How to write an extended ACL for a Cisco router?

Both problems are impossible as stated. "Web access" can take place on any port, as can "DNS access". Whoever wrotes these questions either does not understand Cisco extended ACLs (and thinks they do some kind of protocol-level filtering) or is making a set of simplifying umptions. If the latter, the questions can't be answered without knowing the umptions.