mediumMultiple ChoiceObjective-mapped

CISA Practice Question: Refer to the exhibit

Exhibit

Refer to the exhibit.

{
  "version": "2.0",
  "routeSelection": "lowest-cost",
  "rules": [
    {
      "action": "forward",
      "match": {
        "sourceIp": "10.0.1.0/24",
        "destinationPort": 8080
      },
      "target": "backend-pool-1"
    },
    {
      "action": "forward",
      "match": {
        "sourceIp": "10.0.2.0/24",
        "destinationPort": 80
      },
      "target": "backend-pool-2"
    }
  ]
}

Refer to the exhibit. A cloud load balancer uses this JSON configuration. A request arrives from source IP 10.0.1.100 to port 80. Which backend pool will receive the request?

⚠ Common exam trap

ISACA often tests the misconception that a matching rule automatically forwards traffic, ignoring that a default deny or missing listener action can override the rule and drop the request.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The request is dropped

The JSON configuration defines a rule that forwards traffic matching source IP 10.0.1.0/24 and destination port 443 to backend-pool-1. The request from 10.0.1.100 to port 80 does not match the port 443 condition, so the rule is not applied. Since no other rule matches and the load balancer's default action is to drop traffic, the request is dropped.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✓
The request is dropped
Why this is correct
No matching rule and no default.
✗
backend-pool-1
Why it's wrong here
Port does not match.
✗
The request is sent to both pools
Why it's wrong here
Not configured for multicast.
✗
backend-pool-2
Why it's wrong here
Source IP does not match.

Go deeper

CISA Practice Question: Refer to the exhibit

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question