A firewall admin reviews a ruleset and finds: Rule 1 ALLOW any → 10.0.0.50:443, Rule 2 DENY 192.168.10.0/24 → any, Rule 3 ALLOW 192.168.10.5 → 10.0.0.50:443. Which statement is accurate about Rule 3?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — b is correct because most firewalls evaluate rules top-down and stop at the first match. Rule 2 DENY covers the entire 192.168.10.0/24 subnet including .10.5, so Rule 3 is never reached — it is a shadowed rule.
Full explanation below image
Full Explanation
B is correct because most firewalls evaluate rules top-down and stop at the first match. Rule 2 DENY covers the entire 192.168.10.0/24 subnet including .10.5, so Rule 3 is never reached — it is a shadowed rule. A is wrong because the deny in Rule 2 is evaluated first. C is wrong because specificity does not override order in top-down rulesets. D is wrong because there is no conflict; the deny simply takes effect.