easyMultiple Choice
SSCP Practice Question: A security administrator is configuring a…
A security administrator is configuring a firewall to allow HTTPS traffic from the internet to a web server. Which default port must be permitted?
⚠ Common exam trap
Test-takers frequently confuse well-known alternate ports (8080 for HTTP proxies, 8443 for admin HTTPS) with the IANA default, so candidates who have seen 8443 in a lab pick it instead of 443.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
443
HTTPS (HTTP over TLS) is assigned TCP port 443 by IANA and is the default port browsers and clients use when no port is specified in an https:// URL. A firewall rule permitting inbound TCP 443 to the web server is therefore required for standard HTTPS traffic from the internet. Port 80 is the default for plain HTTP, not HTTPS.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
8443
Why it's wrong here
Port 8443 is a common alternate HTTPS port for Tomcat and management consoles, not the IANA default. It is tempting because it does carry TLS, and it would be the right choice if the stem named a non-standard HTTPS listener instead of the default port.
- ✗
8080
Why it's wrong here
Port 8080 is an alternate HTTP port used by proxies and application servers, not the default for HTTPS. It is tempting because it appears in web-tier configurations, and it would be correct if the stem specified a non-standard HTTP listener rather than default HTTPS.
- ✓
443
Why this is correct
HTTPS uses TCP port 443 by default for encrypted web traffic, so the firewall rule must permit it inbound to the web server. Port 80 is plain HTTP, while 22 and 3389 serve SSH and RDP respectively.
- ✗
80
Why it's wrong here
Port 80 carries cleartext HTTP, so permitting it would not allow HTTPS and would expose the web server to unencrypted traffic. It is tempting because 80 is the default for web publishing, and it would be the right choice when the requirement is plain HTTP or an HTTP-to-HTTPS redirect listener.
About these practice questions
One of 971 original SSCP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official ISC2 exam blueprint
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.