easyMultiple ChoiceObjective-mapped
SSCP Practice Question: Refer to the exhibit
Exhibit
access-list 100 permit tcp any host 10.0.0.1 eq 22 access-list 100 deny ip any any log interface GigabitEthernet0/0 ip access-group 100 in
Refer to the exhibit. What is the effect of this access control list on traffic entering the interface?
⚠ Common exam trap
ISC2 often tests the distinction between the implicit deny (which does not log) and an explicit deny with the 'log' keyword, leading candidates to mistakenly think that all denied traffic is automatically logged.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Allows SSH to 10.0.0.1 and blocks all other traffic with logging
The ACL shown (likely an extended IP access list with a permit statement for TCP port 22 to host 10.0.0.1 followed by a deny ip any any log statement) permits SSH traffic to 10.0.0.1 and explicitly denies all other traffic while logging the denied packets. The implicit deny at the end of every ACL would block unmatched traffic, but the explicit deny with the 'log' keyword ensures that denied packets are logged, which matches the description in B.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Permits only TCP traffic to 10.0.0.1 on port 22
Why it's wrong here
This is incomplete; the deny and log are also effects.
- ✓
Allows SSH to 10.0.0.1 and blocks all other traffic with logging
Why this is correct
The permit allows SSH, the deny blocks all else with log.
- ✗
Blocks all traffic except SSH and logs the denied packets
Why it's wrong here
The deny applies to all traffic, including SSH, but SSH is permitted first.
- ✗
Allows all TCP traffic to any host on port 22
Why it's wrong here
The permit statement specifies host 10.0.0.1 only.
- ✗
Allows all traffic to 10.0.0.1
Why it's wrong here
Only TCP port 22 is permitted.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 920 original SSCP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.