Courseiva
← CCSP
Full test
easyMultiple ChoiceObjective-mapped

CCSP Practice Question: Refer to the exhibit

Exhibit

Refer to the exhibit.

Security Group: sg-12345 (web-sg)
Inbound Rules:
  - Type: HTTP (80), Protocol: TCP, Port Range: 80, Source: 0.0.0.0/0
  - Type: HTTPS (443), Protocol: TCP, Port Range: 443, Source: 0.0.0.0/0
  - Type: SSH (22), Protocol: TCP, Port Range: 22, Source: 10.0.0.0/8
Outbound Rules:
  - Type: All traffic, Protocol: All, Port Range: All, Destination: 0.0.0.0/0

Refer to the exhibit. An administrator attaches security group sg-12345 to a web server. Which of the following describes the traffic that will be allowed by the security group?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Inbound HTTP and HTTPS from anywhere, and SSH only from the internal network are allowed.

The security group allows inbound HTTP (port 80) and HTTPS (port 443) from anywhere (0.0.0.0/0), and SSH (port 22) only from the internal network (10.0.0.0/8). Outbound all traffic is allowed. Option A is incorrect because it omits HTTP/HTTPS. Option C is incorrect because outbound traffic is allowed. Option D is incorrect because not all inbound traffic is allowed (SSH is restricted).

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    Only SSH traffic from the internal network is allowed inbound.

    Why it's wrong here

    HTTP and HTTPS from internet are also allowed.

  • ✓

    Inbound HTTP and HTTPS from anywhere, and SSH only from the internal network are allowed.

    Why this is correct

    This matches the rules shown.

  • ✗

    The server cannot initiate any outbound connections.

    Why it's wrong here

    Outbound all traffic is allowed.

  • ✗

    All inbound traffic from the internet is allowed.

    Why it's wrong here

    Only HTTP and HTTPS are allowed from internet; SSH is restricted.

About these practice questions

Courseiva writes every CCSP question from scratch — 964 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.