easyMultiple Choice
SSCP Practice Question: A network administrator is configuring a firewall…
A network administrator is configuring a firewall rule to allow inbound HTTPS traffic to a web server. Which protocol and port should be allowed?
⚠ Common exam trap
Many candidates confuse HTTP (TCP 80) with HTTPS (TCP 443) or mistakenly think HTTPS can use UDP, but the SSCP exam expects you to know that standard HTTPS uses TCP port 443.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
TCP port 443
HTTPS (HTTP over TLS) uses TCP as its transport protocol because it requires reliable, connection-oriented delivery for secure web traffic. The default port for HTTPS is 443, as defined in RFC 2818. Therefore, allowing TCP port 443 is the correct firewall rule.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
UDP port 80
Why it's wrong here
Both elements are wrong: port 80 is plain HTTP, and UDP does not carry standard HTTPS, which requires TCP. It is tempting because port 80 is the familiar web port, and UDP 80 would only appear in niche non-TLS UDP services, not an HTTPS listener.
- ✗
UDP port 443
Why it's wrong here
HTTPS runs over TCP, not UDP; UDP 443 carries QUIC or DTLS rather than the TCP-based TLS session the web server expects. It is tempting because 443 is the correct HTTPS port, and UDP 443 would be right for HTTP/3 over QUIC.
- ✓
TCP port 443
Why this is correct
HTTPS uses TCP port 443, so permitting that protocol and port allows encrypted inbound web traffic to reach the server. TCP provides the reliable, connection-oriented transport TLS requires, unlike UDP, and port 80 would only serve unencrypted HTTP.
- ✗
TCP port 80
Why it's wrong here
Port 80 carries unencrypted HTTP, so allowing it inbound does not serve HTTPS and exposes the web server to cleartext traffic. It is tempting because port 80 is the standard listener for plain web content, and would be correct if the requirement were ordinary HTTP rather than TLS-protected HTTPS.
Visual reference
Go deeper
Related to this question
About these practice questions
This SSCP question is part of Courseiva's 971-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on SSCP
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A security administrator is configuring a firewall to allow HTTPS traffic from the internet to a web server. Which default port must be permitted?
easy- A.8443
- B.8080
- ✓ C.443
- D.80
Why C: HTTPS (HTTP over TLS) is assigned TCP port 443 by IANA and is the default port browsers and clients use when no port is specified in an https:// URL. A firewall rule permitting inbound TCP 443 to the web server is therefore required for standard HTTPS traffic from the internet. Port 80 is the default for plain HTTP, not HTTPS.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.