Exam 200-901 topic 1 question 106 discussion

Actual exam question from Cisco's 200-901

Question #: 106
Topic #: 1

Refer to the exhibit. A developer can access the TLS REST API on server A, but cannot access the API on server B. The developer can ping server B. When the developer performs a packet capture on the TLS REST API port on server B, the capture shows that the packet arrived and the server responded. What causes the issue?

A. Port 80 is blocked on the outgoing interface of firewall B.
B. Port 443 is blocked on the outgoing interface of firewall A.
C. Port 443 is blocked on the incoming interface of firewall B.
D. Port 80 is blocked on the incoming interface of firewall A.

Show Suggested Answer

Suggested Answer: C 🗳️

by macxsz at June 11, 2022, 10:52 p.m.

Comments

Submit Cancel

rafailsharifov

1 year ago

There is no correct answer. Usually firewalls block or allow destination port and usually they are statefull, which means if the packer going out from inbound interface Firewall B, the respond to this packet will automatically allowed back. Lets say it is stateless and doesn`t work that way, in that case the packet coming back to firewall B`s inbound interface from Server B, is source port 443 and destination port is randomly selected by developer comp. Which blocking or opening 443 in Firewall B inbound interface will not change anything. Ping is working and packet is arriving to Server B, and respond get dropped somewhere, in most cases it could be MTU issue specially there is VPN between. There should be another answer with MTU, however MTU is heavy topic for this certification exam.

upvoted 4 times

...

aplicacion101

1 year, 10 months ago

Selected Answer: C

A and D are incorrect because use port 80 HTTP C is correct due F-B block response API REST. The questions says the packet arrived y server B responsed. So interface incoming in F-B block the return

upvoted 2 times

...