350-701 Network Security Practice Question
An engineer needs to allow inbound HTTP traffic from the internet to a web server in the DMZ on a Cisco ASA. The DMZ interface security level is 50, and the outside interface is 0. Which interface direction should the access control entry be applied?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Inbound on the outside interface
Traffic from outside (level 0) to DMZ (level 50) is inbound to the DMZ interface, so the ACL should be applied inbound on the outside interface or outbound on the DMZ interface; the standard approach is inbound on the lower security interface.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Inbound on the outside interface
Why this is correct
Correct. Traffic from lower to higher security level requires an ACL inbound on the lower security interface.
- ✗
Outbound on the DMZ interface
Why it's wrong here
Outbound on DMZ would filter traffic leaving DMZ.
- ✗
Outbound on the outside interface
Why it's wrong here
Outbound ACL on outside would affect traffic leaving outside, not entering.
- ✗
Inbound on the DMZ interface
Why it's wrong here
Inbound on DMZ would filter traffic entering DMZ from inside, not from outside.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 978 original 350-701 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.