mediumMultiple ChoiceObjective-mapped
ISC2 CC Practice Question: Refer to the exhibit
Exhibit
access-list 100 permit tcp any host 10.0.0.1 eq 80 access-list 100 permit tcp any host 10.0.0.1 eq 443 access-list 100 deny ip any any
Refer to the exhibit. Given the ACL shown, which traffic is allowed to reach 10.0.0.1?
⚠ Common exam trap
ISC2 often tests the implicit deny any at the end of ACLs, leading candidates to forget that only explicitly permitted traffic is allowed, and that the ACL does not block traffic based on source network unless specified.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
HTTP and HTTPS only.
The ACL permits TCP traffic to destination 10.0.0.1 with destination port numbers 80 (HTTP) and 443 (HTTPS). Since the ACL ends with an implicit deny any, only HTTP and HTTPS traffic is allowed to reach 10.0.0.1. Option B is correct because the ACL explicitly permits these two services.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
No traffic is allowed.
Why it's wrong here
The first two permits allow some traffic.
- ✓
HTTP and HTTPS only.
Why this is correct
Permit statements for ports 80 and 443 allow HTTP and HTTPS.
- ✗
Only traffic from the internal network.
Why it's wrong here
The ACL does not restrict by source network; it allows any.
- ✗
All TCP traffic from any source.
Why it's wrong here
Only TCP traffic to ports 80 and 443 is permitted.
Visual reference
Go deeper
Related to this question
Learn chapter
Logical Access Controls
Key term
Implicit deny
Implicit deny is a security rule that automatically blocks any network traffic that is not explicitly allowed by an access control list or firewall rule.
Key term
Hypertext Transfer Protocol Secure
Hypertext Transfer Protocol Secure, or HTTPS, is the secure version of HTTP that encrypts data between a web browser and a website using SSL/TLS to protect sensitive information like passwords and credit card numbers.
About these practice questions
Courseiva writes every CC question from scratch — 976 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.