mediumMultiple ChoiceObjective-mapped
300-410 Practice Question: Review the following configuration: ipv6…
Review the following configuration:
ipv6 access-list FILTER
permit tcp 2001:db8:1::/48 any eq 80 permit tcp 2001:db8:1::/48 any eq
443
deny ipv6 any any interface GigabitEthernet0/3
ipv6 traffic-filter FILTER out
What is the effect of this configuration?
⚠ Common exam trap
Cisco often tests the misconception that an ACL without a destination prefix permits all traffic from the source, but in reality, the permit statement still requires the specified protocol and ports to match, and the explicit deny blocks everything else.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Only HTTP and HTTPS traffic from 2001:db8:1::/48 is permitted outbound; all other traffic is denied.
The IPv6 ACL named FILTER explicitly permits TCP traffic from source prefix 2001:db8:1::/48 to any destination on ports 80 (HTTP) and 443 (HTTPS), and then denies all other IPv6 traffic. Applied as an outbound traffic filter on GigabitEthernet0/3, this configuration restricts outbound traffic to only HTTP and HTTPS sessions originating from the specified prefix.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Only HTTP and HTTPS traffic from 2001:db8:1::/48 is permitted outbound; all other traffic is denied.
Why this is correct
The permit statements match source prefix and destination ports; the implicit deny blocks everything else.
- ✗
All traffic from 2001:db8:1::/48 is permitted because the ACL does not specify destination prefix.
Why it's wrong here
The ACL specifies destination 'any', but the port match restricts to HTTP/HTTPS only.
- ✗
The ACL is misconfigured because 'out' should be 'in' for source-based filtering.
Why it's wrong here
Outbound filtering is valid; it checks source/destination as the packet exits the interface.
- ✗
The ACL permits all traffic because the deny statement is implicit.
Why it's wrong here
The explicit deny at the end overrides the implicit deny but has the same effect; only permitted traffic passes.
Visual reference
Go deeper
Related to this question
About these practice questions
This 300-410 question is part of Courseiva's 1,966-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.