mediumMultiple ChoiceObjective-mapped
200-201 Practice Question: Refer to the exhibit
Exhibit
Building configuration... Current configuration : 2345 bytes ! interface GigabitEthernet0/1 description Internal Network ip address 192.168.1.1 255.255.255.0 no ip redirects no ip proxy-arp ip access-group INBOUND in ! ip access-list extended INBOUND permit tcp 10.0.0.0 0.255.255.255 any eq 80 permit tcp 10.0.0.0 0.255.255.255 any eq 443 deny ip any any
Refer to the exhibit. A security analyst reviews the configuration of a router and notices the access list applied to the internal interface. Which traffic from the source network 10.0.0.0/8 will be permitted? (Assume typical web traffic.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
HTTP and HTTPS traffic only
The ACL permits TCP traffic from 10.0.0.0/8 to any destination on ports 80 (HTTP) and 443 (HTTPS). Option B is wrong because only these two ports are permitted. Option C is wrong because it permits only HTTP and HTTPS. Option D is wrong because both HTTP and HTTPS are allowed.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
HTTP and HTTPS traffic only
Why this is correct
The ACL explicitly permits TCP traffic to ports 80 and 443.
- ✗
All TCP traffic
Why it's wrong here
The ACL only permits specific TCP ports, not all TCP.
- ✗
All IP traffic from 10.0.0.0/8
Why it's wrong here
The ACL denies all other IP traffic after the permit statements.
- ✗
Only HTTP traffic
Why it's wrong here
Both HTTP and HTTPS are permitted.
Visual reference
Go deeper
Related to this question
About these practice questions
This 200-201 question is part of Courseiva's 979-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-201 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-201 exam.