easyMultiple ChoiceObjective-mapped
200-901 Practice Question: Needs to allow HTTPS traffic from the internet to…
A network engineer needs to allow HTTPS traffic from the internet to an internal web server. Which type of firewall rule should be applied on the perimeter firewall?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Inbound ACL on the outside interface
An inbound ACL on the outside interface allows traffic from the internet to reach internal servers while blocking unauthorized access. Option A (routing protocol configuration) does not control traffic filtering. Option B (outbound ACL on inside interface) controls traffic leaving the network, not incoming HTTPS. Option D (static NAT) translates addresses but does not filter traffic.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Routing protocol configuration
Why it's wrong here
Routing determines paths, not security filtering.
- ✗
Outbound ACL on the inside interface
Why it's wrong here
Outbound ACL on inside would control traffic from internal to outside, not the reverse.
- ✓
Inbound ACL on the outside interface
Why this is correct
An inbound ACL on the outside interface permits incoming HTTPS traffic to the web server.
- ✗
Static NAT configuration
Why it's wrong here
NAT translates addresses but does not filter traffic.
Visual reference
Go deeper
Related to this question
About these practice questions
This 200-901 question is part of Courseiva's 989-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-901 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-901 exam.