F5 Networks Exam 301b Topic 2 Question 86 Discussion

Actual exam question for F5 Networks's 301b exam

Question #: 86
Topic #: 2

[All 301b Questions]

Which iRule will reject any connection originating from a 10.0.0.0/8 network?

Awhen CLIENT_ACCEPTED {
set remote_ip [IP::addr [IP::remote_addr] mask 8]
switch $remote_ip {
'10.0.0.0' { reject }
'11.0.0.0' { pool pool_http1}
default { pool http_pool }
}
}

Bwhen CLIENT_ACCEPTED {
set remote_ip [IP::addr [IP::local_addr] mask 8]
switch $remote_ip {
'10.0.0.0' { reject }
'11.0.0.0' { pool pool_http1}
default { pool http_pool }
}
}

Cwhen CLIENT_ACCEPTED {
set remote_ip [IP::addr [IP::client_addr] mask 255.0.0.0]
switch $remote_ip {
'10.0.0.0' { reject }
'11.0.0.0' { pool pool_http1}
default { pool http_pool }
}
}

Dwhen CLIENT_ACCEPTED {
set remote_ip [IP::addr [IP::local_addr] mask 255.0.0.0]
switch $remote_ip {
'10.0.0.0' { reject }
'11.0.0.0' { pool pool_http1}
default { pool http_pool }
}
}

Show Suggested Answer

Suggested Answer: A

by Marvel at Apr 29, 2024, 03:41 PM

Limited Time Offer

25%

Off

Get Premium 301b Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Trinidad

4 hours ago

Haha, I bet the person who wrote option B thought they were being clever by using IP::local_addr instead of IP::remote_addr. Nice try, but that's not going to work.

upvoted 0 times

...

Billye

2 days ago

I think A is the right choice. Checking the remote IP address and rejecting based on the network is the way to go here.

upvoted 0 times

...

Leandro

7 days ago

That makes sense, option C does seem to be more precise in identifying the client address. Thanks for sharing your perspective, Marquetta.

upvoted 0 times

...

Elfriede

9 days ago

The correct answer is A. It uses the IP::addr command to get the network address of the remote IP address and checks if it's in the 10.0.0.0/8 network before rejecting the connection.

upvoted 0 times

...

Marquetta

10 days ago

I disagree, I believe option C is the right choice because it masks the client address correctly.

upvoted 0 times

...

Leandro

16 days ago

I think the correct iRule to reject connections from a 10.0.0.0/8 network is option A.

upvoted 0 times

...