🔥 40% Off Crucial Exams Memberships — This Week Only

2 days, 11 hours remaining!
Crucial Exams

ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

A company's perimeter Cisco IOS router connects the corporate network to the Internet. Management wants to ensure that outside hosts cannot start new Telnet sessions with any internal device, but employees must still be able to initiate Telnet sessions to business partners on the Internet. Which access-control list (ACL) approach best meets this requirement while following the principle of least privilege and avoiding disruption to other traffic?

  • Apply a standard ACL outbound on the inside interface that denies tcp any eq 23 any and then permits all other traffic.

  • Configure a reflexive ACL inbound on the outside interface to permit only established connections and explicitly deny tcp any any eq 23.

  • Create an extended ACL that denies tcp any any eq 23 and permits all other IP traffic, and apply it inbound on the router's outside interface.

  • Attach an extended ACL outbound on the inside interface that denies tcp any any eq 23 followed by a permit-ip any any statement.

ISC2 Systems Security Certified Practitioner (SSCP)
Network and Communication Security
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot