CCNP Infrastructure Practice Question
Exhibit
Refer to the exhibit. ! Running-config on R1 ip access-list extended FILTER permit tcp 192.168.1.0 0.0.0.255 any eq www permit tcp 192.168.1.0 0.0.0.255 any eq https ! interface GigabitEthernet0/0 ip access-group FILTER out !
Based on the exhibit, which traffic will be permitted outbound on GigabitEthernet0/0?
⚠ Common exam trap
Cisco often tests the implicit deny any at the end of an ACL, leading candidates to assume that traffic not explicitly denied is permitted, when in fact only explicitly permitted traffic is allowed.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
HTTP and HTTPS traffic from 192.168.1.0/24
The exhibit shows an access control list (ACL) applied outbound on GigabitEthernet0/0. The ACL permits TCP traffic from source 192.168.1.0/24 to any destination with a destination port of 80 (HTTP) or 443 (HTTPS). Therefore, only HTTP and HTTPS traffic from the 192.168.1.0/24 network is permitted outbound.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
HTTP and HTTPS traffic from 192.168.1.0/24
Why this is correct
The ACL permits www and https.
- ✗
ICMP traffic from any source
Why it's wrong here
ICMP is not permitted.
- ✗
FTP traffic from 192.168.1.0/24
Why it's wrong here
FTP is not permitted.
- ✗
SSH traffic from 192.168.1.0/24
Why it's wrong here
SSH is not permitted.
Visual reference
About these practice questions
One of 1,175 original 350-401 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.