Courseiva
easyMultiple ChoiceObjective-mapped

200-201 Practice Question: Refer to the exhibit

Exhibit

Refer to the exhibit.

```
interface GigabitEthernet0/0
 ip access-group BLOCK_P2P in
!
ip access-list extended BLOCK_P2P
 deny tcp any any eq 6881 6889
 deny udp any any range 6881 6889
 permit ip any any
```

Refer to the exhibit. A network administrator applies this ACL to the WAN interface. What is the effect on BitTorrent traffic (which typically uses ports 6881-6889)?

⚠ Common exam trap

Cisco often tests the concept of ACL directionality, where candidates mistakenly think an inbound ACL on the WAN interface affects outgoing traffic, when in fact it only filters incoming traffic from the internet.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Incoming BitTorrent traffic using ports 6881-6889 is blocked

The ACL shown in the exhibit (not provided here but implied by the question) is applied to the WAN interface and blocks incoming TCP traffic on ports 6881-6889. BitTorrent traffic typically uses these ports, so the ACL specifically denies incoming BitTorrent connections while leaving outgoing BitTorrent traffic unaffected. This is why option C is correct.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • All TCP traffic is blocked

    Why it's wrong here

    Only TCP on ports 6881-6889 is blocked; other TCP traffic is permitted.

  • Only outgoing BitTorrent traffic is blocked

    Why it's wrong here

    The ACL is applied inbound, so it affects incoming traffic, not outgoing.

  • Incoming BitTorrent traffic using ports 6881-6889 is blocked

    Why this is correct

    The ACL denies those ports inbound, blocking incoming BitTorrent connections.

  • All BitTorrent traffic is permitted

    Why it's wrong here

    The ACL specifically denies the ports commonly used by BitTorrent.

Visual reference

Source Router + ACL permit 10.0.0.0/8 deny any Server 10.0.0.5 ✓ 192.168.1.1 ✗ dropped ACLs evaluate top-down; first match wins — implicit deny all at end

About these practice questions

One of 979 original 200-201 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This 200-201 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-201 exam.