Evaluating Traffic with Firewall Filter
Question
You have configured a firewall filter with a single term matching on packets with a source address in the 10.0.0.0/24 subnet. This term only includes the count action.
Which two statements are true about traffic evaluated by this firewall filter? (Choose two.)
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D.AC
The firewall filter in question matches packets with a source address in the 10.0.0.0/24 subnet and includes only the count action. Based on this configuration, the following two statements are true:
C. Packets within the 10.0.0.0/24 subnet will be counted.
This is because the firewall filter includes the count action, which counts the number of packets that match the filter criteria. Therefore, packets within the 10.0.0.0/24 subnet will be counted as they match the filter criteria.
D. Packets within the 10.0.0.0/24 subnet will not be rejected or accepted.
This is because the firewall filter only includes the count action and no other actions such as accept or reject. Without an accept or reject action, packets matching the filter criteria will not be allowed or blocked by the firewall filter, and they will continue to be processed by subsequent firewall filters or policy rules.
Therefore, option A and B are incorrect. They suggest that packets will be either accepted or rejected, but since the firewall filter only includes the count action, no such action will be taken.
In summary, packets within the 10.0.0.0/24 subnet will be counted by the firewall filter, but they will not be accepted or rejected as no such action has been configured in the firewall filter.
