Question

You are asked to configure your firewall in such a way that the traffic from source address range 117.112.10.25 through 117.112.15.100 is allowed, while traffic from 117.112.12.25 through 117.112.13.25 is denied, and traffic from 117.112.12.200 through 117.112.13.10 is allowed. How should you configure the firewall?a. deny 117.112.10.25 through 117.112.10.25 ; deny 117.112.10.25 through 117.112.12.25 ; allow 117.112.12.25 through 117.112.12.25 b. Allow 117.112.10.25 through 117.112.15.100; deny 117.112.12.25 through 117.112.13.25; force-allow 117.112.12.200 through 117.112.13.10 c. allow 117.112.13.25 through 117.112.13.23 ; deny 117.112.13.24 through 117.112.13.26 ; force-allow 117.212.13.25 through 517.112.13.25 d. allow 117.112.13.10 through 117.112.13.10 ; deny 117.112.13.10 through117.112.13.10 ; allow 117.112.13.10 through 117.112.13.10

Answer 1

b. Allow 117.112.10.25 through 117.112.15.100; deny 117.112.12.25 through 117.112.13.25; force-allow 117.112.12.200 through 117.112.13.10

To configure the firewall according to the given requirements, the following rules should be implemented:

1. Allow traffic from source address range 117.112.10.25 through 117.112.15.100.

2. Deny traffic from source address range 117.112.12.25 through 117.112.13.25.

3. Allow traffic from source address range 117.112.12.200 through 117.112.13.10.

Among the given options, option b correctly represents these rules. It allows the specified ranges and denies the specified ranges while using the "force-allow" terminology to indicate explicit allowance.

Therefore, the firewall should be configured with the following rules:

- Allow 117.112.10.25 through 117.112.15.100

- Deny 117.112.12.25 through 117.112.13.25

- Allow 117.112.12.200 through 117.112.13.10

thank you