Is it just me that think there has to be something wrong with these questions/answers?
1) Why is this the best answer? How does the correct answer achieve the objective? The ACL says:
Deny any TCP traffic with IP addresses belonging to the 192.168.1.0 0.0.0.255 (match first 24 bits, left to right) with source port 80 to a single IP address 10.1.1.101
then allow all other traffic that doesn't match above
If I do that ^^^ outbound of serial 0/0/0 (sample config), it does make more sense to analyze the traffic before you send it out / before it could reach the destination.
Changing the config to "ip access-group 170 i" won't prevent packets from 172.16.0.0/16 and 192.168.1.0/24 from reaching Branch.
If it was me, I would write
deny ip 172.16.0.0 0.0.255.255 10.1.1.0 0.0.0.255 deny ip 192.168.1.0 0.0.0.255 10.1.1.0 0.0.0.255 permit ip any any
2) This question uses the same configs but has a different objective. How does this config/example achieve the desired objective? The port should have been on the destination address.
Thank you all for you time.