Courseiva
← 350-701
Full test
mediumMultiple ChoiceObjective-mapped

350-701 Practice Question: Refer to the exhibit

Exhibit

Refer to the exhibit.
```
interface GigabitEthernet0/1
 ip address 192.168.1.1 255.255.255.0
 ip access-group INBOUND in
!
access-list 100 permit tcp any host 192.168.1.100 eq 80
access-list 100 deny ip any any
```

Refer to the exhibit. A network administrator applies the ACL to the interface. What is the effect on traffic inbound to the interface?

⚠ Common exam trap

Cisco often tests the implicit deny all at the end of ACLs, and the trap here is that candidates may overlook that only the explicitly permitted traffic is allowed, assuming that a single permit statement implies all other traffic is also permitted.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Only TCP traffic destined to 192.168.1.100 on port 80 is permitted; all other IP traffic is denied

The ACL is applied inbound on the interface and contains a single entry that permits TCP traffic from any source to destination 192.168.1.100 on port 80. Because there is an implicit deny all at the end of every standard and extended ACL, only traffic matching this specific permit statement is allowed; all other IP traffic is denied.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    All TCP traffic is permitted; other IP traffic is denied

    Why it's wrong here

    Only TCP to port 80 is permitted, not all TCP.

  • ✓

    Only TCP traffic destined to 192.168.1.100 on port 80 is permitted; all other IP traffic is denied

    Why this is correct

    The ACL permits only HTTP to that host and denies the rest.

  • ✗

    All IP traffic is permitted

    Why it's wrong here

    The explicit deny blocks all other traffic.

  • ✗

    The ACL is applied outbound, so it has no effect on inbound traffic

    Why it's wrong here

    The ACL is applied inbound (ip access-group INBOUND in).

Visual reference

Source Router + ACL permit 10.0.0.0/8 deny any Server 10.0.0.5 ✓ 192.168.1.1 ✗ dropped ACLs evaluate top-down; first match wins — implicit deny all at end

About these practice questions

One of 978 original 350-701 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.