easyMultiple ChoiceObjective-mapped
SSCP Practice Question: A network administrator is configuring a firewall…
A network administrator is configuring a firewall rule to allow inbound HTTPS traffic to a web server. Which protocol and port should be allowed?
⚠ Common exam trap
Many candidates confuse HTTP (TCP 80) with HTTPS (TCP 443) or mistakenly think HTTPS can use UDP, but the SSCP exam expects you to know that standard HTTPS uses TCP port 443.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
TCP port 443
HTTPS (HTTP over TLS) uses TCP as its transport protocol because it requires reliable, connection-oriented delivery for secure web traffic. The default port for HTTPS is 443, as defined in RFC 2818. Therefore, allowing TCP port 443 is the correct firewall rule.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
UDP port 80
Why it's wrong here
Not a standard service.
- ✗
UDP port 443
Why it's wrong here
HTTPS uses TCP, not UDP.
- ✓
TCP port 443
Why this is correct
HTTPS uses TCP port 443 by default.
- ✗
TCP port 80
Why it's wrong here
Port 80 is for HTTP, not HTTPS.
Visual reference
Go deeper
Related to this question
About these practice questions
This SSCP question is part of Courseiva's 920-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on SSCP
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A security administrator is configuring a firewall to allow HTTPS traffic from the internet to a web server. Which default port must be permitted?
easy- A.8443
- B.8080
- ✓ C.443
- D.80
Why C: HTTPS uses port 443 by default. Port 80 is HTTP, 8080 is common HTTP alternative, and 8443 is HTTPS alternative but not default.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.