mediumMultiple ChoiceObjective-mapped
300-410 Practice Question: Runs the following command on Router R1: R1# show…
A network engineer runs the following command on Router R1:
R1# show ip access-lists
Extended IP access list 180
10 permit tcp 192.168.1.0 0.0.0.255 any eq 80 (50 matches)
20 permit tcp 192.168.2.0 0.0.0.255 any eq 443 (30 matches)
30 deny ip any any (5 matches)Based on this output, what is the problem?
⚠ Common exam trap
Cisco often tests the ability to interpret ACL match counters and recognize that a working ACL with expected matches does not indicate a problem, leading candidates to incorrectly assume a misconfiguration when none exists.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Traffic from 192.168.1.0/24 to port 80 is permitted.
The ACL explicitly permits TCP traffic from the 192.168.1.0/24 network to any destination on port 80, as shown by the first entry with 50 matches. The output confirms that this traffic is being allowed, so there is no problem with that specific rule.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Traffic from 192.168.1.0/24 to port 80 is permitted.
Why this is correct
Line 10 permits that traffic with 50 matches.
- ✗
Traffic from 192.168.2.0/24 to port 443 is denied.
Why it's wrong here
Line 20 permits that traffic with 30 matches.
- ✗
All traffic from 192.168.1.0/24 is permitted.
Why it's wrong here
Only HTTP is permitted; other traffic from that subnet is denied by line 30.
- ✗
The ACL is correctly configured to allow only specific web traffic.
Why it's wrong here
While it allows specific web traffic, it denies all other traffic, which may be a problem if other services are needed.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 1,966 original 300-410 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.