NETSEC-GENERALIST · Question #37
NETSEC-GENERALIST Question #37: Real Exam Question with Answer & Explanation
The correct answer is C: 20.10.10.15. Based on the image and default rulestack settings of the Cloud NGFW for AWS, the source IP address seen in the data filtering logs will be 20.10.10.15, which is the IP address of the load Default Rulestack Behavior: By default, the rulestack settings do not inspect or preserve th
Question
Based on the image below, which source IP address will be seen in the data filtering logs of the Cloud NGFW for AWS with the default rulestack settings?
Options
- A10.1.1.3
- B20.10.10.16
- C20.10.10.15
- D10.1.1.2
Explanation
Based on the image and default rulestack settings of the Cloud NGFW for AWS, the source IP address seen in the data filtering logs will be 20.10.10.15, which is the IP address of the load Default Rulestack Behavior: By default, the rulestack settings do not inspect or preserve the original client IP (e.g., 10.1.1.2) in the "X-Forwarded-For" header. Instead, the load balancer's IP (20.10.10.15) is recorded as the source IP. Logging Mechanism: Unless explicitly configured to parse the "X-Forwarded-For" header, the firewall's logs will reflect the IP address of the device directly sending the traffic to the NGFW (the load balancer in this case).
Topics
Community Discussion
No community discussion yet for this question.