Courseiva
← CC
Full test
mediumMultiple ChoiceObjective-mapped

ISC2 CC Practice Question: Refer to the exhibit

Exhibit

access-list 100 deny ip 10.0.1.0 0.0.0.255 any log
access-list 100 permit tcp any host 192.168.1.100 eq 80
access-list 100 deny ip any any

Refer to the exhibit. Based on the exhibit, which traffic will be permitted?

⚠ Common exam trap

ISC2 often tests the distinction between source and destination in ACL statements, and the trap here is that candidates misread the ACL as permitting traffic from 192.168.1.100 (source) rather than to it (destination), or confuse the port number (80 for HTTP vs. 22 for SSH).

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

HTTP traffic from any source to 192.168.1.100

The exhibit shows an access control list (ACL) that permits TCP traffic from any source to destination host 192.168.1.100 on port 80 (HTTP). The ACL entry is `permit tcp any host 192.168.1.100 eq 80`, which matches only HTTP traffic. Therefore, only HTTP traffic from any source to 192.168.1.100 is permitted.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    All traffic from 192.168.1.100

    Why it's wrong here

    The access list is inbound; it controls traffic to 192.168.1.100, not from it. Also, the permit entry only allows specific traffic to that host.

  • ✗

    All traffic from 10.0.1.0/24

    Why it's wrong here

    The first deny statement blocks all IP traffic from 10.0.1.0/24 to any destination.

  • ✗

    SSH traffic from any source to 192.168.1.100

    Why it's wrong here

    SSH uses TCP port 22, which is not permitted; only port 80 is allowed.

  • ✓

    HTTP traffic from any source to 192.168.1.100

    Why this is correct

    The permit statement allows TCP port 80 (HTTP) traffic to host 192.168.1.100 from any source.

Visual reference

Source Router + ACL permit 10.0.0.0/8 deny any Server 10.0.0.5 ✓ 192.168.1.1 ✗ dropped ACLs evaluate top-down; first match wins — implicit deny all at end

About these practice questions

One of 976 original CC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.