Refer to the exhibit. Based on the named extended ACLs configured, the line matching port 443 refers to which protocol?
R1(config)# ip access-list extended SURFING R1(config-ext-nacl)# permit tcp 192.168.0.0 0.0.0.255 any eq 80 R1(config-ext-nacl)# permit tcp 192.168.0.0 0.0.0.255 any eq 443 R1(config-ext-nacl)# exit R1(config)# ip access-list extender BROWSING R1(config-ext-nacl)# permit tcp any 192.168.10.0 0.0.0.255 established R1(config-ext-nacl)# exit
- HTTP
- FTP
- HTTPS
- SNTP
- POP3
Explanation: Extended Access Control Lists (ACLs) provide granular control by allowing administrators to filter traffic based on Layer 4 protocols and port numbers. When configuring these ACLs, Cisco IOS allows the use of either a well-known port number or its corresponding application name.
According to the sources, port 443 is the standard port used for HTTPS (Hypertext Transfer Protocol Secure). In the provided exhibit, the ACL named SURFING is configured to permit traffic from the 192.168.0.0/24 subnet to any destination if the traffic matches specific web protocols:
- Port 80 refers to HTTP (often displayed as the keyword www).
- Port 443 refers to HTTPS.
Other protocols mentioned in the options use different ports: FTP typically uses port 21, and Telnet uses port 23. Thus, the line matching port 443 specifically targets secure web traffic.
Related exam: Modules 14 – 16: Checkpoint Exam: Network Security Answers (CCNP ENCOR v9)
