Traffic Evaluation for Firewall Filter with Source Address in 10.0.0.0/24 Subnet
Question
You have configured a firewall filter with a single term matching on packets with a source address in the 10.0.0.0/24 subnet. This term only includes the count action.
Which two statements are true about traffic evaluated by this firewall filter? (Choose two.)
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D.BD
The firewall filter is configured to match packets with a source address in the 10.0.0.0/24 subnet and includes only the count action. Let's examine what this means for the traffic evaluated by the firewall filter.
Option A - Packets outside the 10.0.0.0/24 subnet will be accepted: This statement is true because the firewall filter only matches on packets with a source address in the 10.0.0.0/24 subnet. Therefore, packets with a source address outside this subnet will not be matched and will be accepted by the firewall filter.
Option B - Packets outside the 10.0.0.0/24 subnet will be rejected: This statement is false because the firewall filter only includes the count action and does not include any action to reject packets. Therefore, packets with a source address outside the 10.0.0.0/24 subnet will not be rejected by the firewall filter.
Option C - Packets outside the 10.0.0.0/24 subnet will be counted: This statement is false because the firewall filter only includes the count action for packets that match the filter criteria, i.e., packets with a source address in the 10.0.0.0/24 subnet. Therefore, packets with a source address outside this subnet will not be counted by the firewall filter.
Option D - Packets outside the 10.0.0.0/24 subnet will not be counted: This statement is true because the firewall filter only includes the count action for packets that match the filter criteria, i.e., packets with a source address in the 10.0.0.0/24 subnet. Therefore, packets with a source address outside this subnet will not be counted by the firewall filter.
In summary, options A and D are the correct answers.
