nerdexam
(ISC)2

301B · Question #194

301B Question #194: Real Exam Question with Answer & Explanation

The correct answer is C. when CLIENT_ACCEPTED { set remote_ip [IP::addr [IP::client_addr] mask 255.0.0.0] switch $remote_ip { "10.0.0.0" { reject } "11.0.0.0" { pool pool_http1 } default { pool http_pool } } }. See the full explanation below for the reasoning.

Question

Which iRule will reject any connection originating from a 10.0.0.0/8 network?

Options

  • Awhen CLIENT_ACCEPTED { set remote_ip [IP::addr [IP::remote_addr] mask 8] switch $remote_ip { "10.0.0.0" { reject } "1.0.0.0" { pool pool_http1 } default { pool http_pool } } }
  • Bwhen CLIENT_ACCEPTED { set remote_ip [IP::addr [IP::local_addr] mask 8] switch $remote_ip { "10.0.0.0" { reject } "11.0.0.0" { pool pool_http1 } default { pool http_pool } } }
  • Cwhen CLIENT_ACCEPTED { set remote_ip [IP::addr [IP::client_addr] mask 255.0.0.0] switch $remote_ip { "10.0.0.0" { reject } "11.0.0.0" { pool pool_http1 } default { pool http_pool } } }
  • Dwhen CLIENT_ACCEPTED { set remote_ip [IP::addr [IP::local_addr] mask 255.0.0.0] switch $remote_ip { "10.0.0.0" { reject } "11.0.0.0" { pool pool_http1 } default { pool http_pool } } }

Community Discussion

No community discussion yet for this question.

Full 301B Practice