mediumMultiple ChoiceObjective-mapped

CAS-004 Practice Question: Refer to the exhibit

Exhibit

access-list extended OUTSIDE-IN
 permit tcp any host 10.0.1.100 eq 443
 permit tcp any host 10.0.1.100 eq 8443
 deny ip any any

Refer to the exhibit. A security analyst notices that users from the internet can reach the web server at 10.0.1.100 on port 443, but they cannot reach it on port 8443. What is the most likely cause?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The web server is not listening on port 8443

The firewall ACL in the exhibit permits traffic on both port 443 and 8443, so the firewall is not blocking port 8443. Therefore, the most likely cause is that the web server is not listening on port 8443. Option A is incorrect because the ACL permits any source. Option B is incorrect because the ACL order is fine. Option D is incorrect because the ACL permits port 8443.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
The ACL only permits traffic from specific source IPs
Why it's wrong here
The ACL permits 'any' source.
✗
The firewall rule order is incorrect
Why it's wrong here
The permit rules are before the deny, so order is correct.
✓
The web server is not listening on port 8443
Why this is correct
If the server is not configured for port 8443, it will not respond.
✗
The firewall is blocking all traffic on port 8443
Why it's wrong here
The ACL explicitly permits port 8443.

Visual reference

Go deeper

CAS-004 Practice Question: Refer to the exhibit

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question