F5 Networks Exam 301b Topic 2 Question 86 Discussion

Actual exam question for F5 Networks's 301b exam

Question #: 86
Topic #: 2

[All 301b Questions]

Which iRule will reject any connection originating from a 10.0.0.0/8 network?

Awhen CLIENT_ACCEPTED {
set remote_ip [IP::addr [IP::remote_addr] mask 8]
switch $remote_ip {
'10.0.0.0' { reject }
'11.0.0.0' { pool pool_http1}
default { pool http_pool }
}
}

Bwhen CLIENT_ACCEPTED {
set remote_ip [IP::addr [IP::local_addr] mask 8]
switch $remote_ip {
'10.0.0.0' { reject }
'11.0.0.0' { pool pool_http1}
default { pool http_pool }
}
}

Cwhen CLIENT_ACCEPTED {
set remote_ip [IP::addr [IP::client_addr] mask 255.0.0.0]
switch $remote_ip {
'10.0.0.0' { reject }
'11.0.0.0' { pool pool_http1}
default { pool http_pool }
}
}

Dwhen CLIENT_ACCEPTED {
set remote_ip [IP::addr [IP::local_addr] mask 255.0.0.0]
switch $remote_ip {
'10.0.0.0' { reject }
'11.0.0.0' { pool pool_http1}
default { pool http_pool }
}
}

Show Suggested Answer

Suggested Answer: A

by Marvel at Apr 29, 2024, 03:41 PM

Limited Time Offer

25%

Off

Get Premium 301b Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Queenie

1 months ago

Option C looks like it's using the right idea, but the mask is a bit off. A is the winner here, no doubt about it.

upvoted 0 times

Joana

11 days ago

I think A is the winner here, no doubt about it.

upvoted 0 times

...

Jesusita

18 days ago

Option C looks like it's using the right idea, but the mask is a bit off.

upvoted 0 times

...

Trinidad

2 months ago

Haha, I bet the person who wrote option B thought they were being clever by using IP::local_addr instead of IP::remote_addr. Nice try, but that's not going to work.

upvoted 0 times

Xochitl

1 months ago

Option A is the correct one to reject connections from the 10.0.0.0/8 network.

upvoted 0 times

...

Billye

2 months ago

I think A is the right choice. Checking the remote IP address and rejecting based on the network is the way to go here.

upvoted 0 times

...

Leandro

2 months ago

That makes sense, option C does seem to be more precise in identifying the client address. Thanks for sharing your perspective, Marquetta.

upvoted 0 times

...

Elfriede

2 months ago

The correct answer is A. It uses the IP::addr command to get the network address of the remote IP address and checks if it's in the 10.0.0.0/8 network before rejecting the connection.

upvoted 0 times