Exam 300-430 topic 1 question 218 discussion

When configuring CPU ACLs on an AireOS Wireless LAN Controller (WLC) to implement security, HTTP and HTTPS traffic must be allowed on the management interface. The management interface is the primary interface used for administrative access to the WLC's web-based user interface (GUI) or CLI. If HTTP/HTTPS traffic is blocked on this interface, administrative users will be unable to access the WLC. Explanation of the options: A. on the dynamic interface: Dynamic interfaces are used for client data traffic and are not relevant for administrative access to the WLC. B. on the service port of management traffic: The service port is typically used for out-of-band management and is not the primary interface for HTTP/HTTPS access to the WLC's GUI. C. on the management interface: This is correct. The management interface is used for administrative access, and HTTP/HTTPS traffic must be allowed here for administrators to access the WLC's user interface. D. on the virtual interface: The virtual interface is used for guest web authentication and mobility-related functions, not for administrative access.

Only port 22 is allowed, ports 80 and 443 should also be allowed.