Courseiva
← CISA
Full test
mediumMultiple ChoiceObjective-mapped

CISA Practice Question: Refer to the exhibit

Exhibit

access-list 100 permit tcp any host 10.1.1.100 eq 443
access-list 100 permit tcp any host 10.1.1.100 eq 22
access-list 100 deny ip any any

Refer to the exhibit. Which of the following services is accessible from the internet to host 10.1.1.100?

⚠ Common exam trap

Many exam-takers confuse HTTP with HTTPS or Telnet with SSH, assuming that if one is allowed, the other must also be allowed, but the ACL explicitly permits only the specific port numbers listed.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

HTTPS and SSH

The exhibit shows an access control list (ACL) permitting TCP ports 443 (HTTPS) and 22 (SSH) from any source to host 10.1.1.100. Since the ACL is applied inbound on the internet-facing interface, only HTTPS and SSH traffic are allowed through to that host. Therefore, option C is correct.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    HTTP only

    Why it's wrong here

    HTTP (port 80) is not permitted by the ACL.

  • ✗

    Telnet only

    Why it's wrong here

    Telnet (port 23) is not permitted.

  • ✓

    HTTPS and SSH

    Why this is correct

    Ports 443 (HTTPS) and 22 (SSH) are explicitly permitted.

  • ✗

    FTP only

    Why it's wrong here

    FTP (port 21) is not permitted.

Visual reference

Source Router + ACL permit 10.0.0.0/8 deny any Server 10.0.0.5 ✓ 192.168.1.1 ✗ dropped ACLs evaluate top-down; first match wins — implicit deny all at end

About these practice questions

This CISA question is part of Courseiva's 995-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.