Using the OR operator between two IP address checks, what traffic is included?

• A. Packets where either A or B is present as an IP address
• B. Packets where both A and B are present as IP addresses
• C. Packets with IP address A only
• D. Packets with IP address B only

Answer: (A)

The concept being tested is how the OR operator affects filtering by IP addresses. When you combine two IP address checks with OR, a packet is included in the result if it satisfies at least one of the checks. So, if you're filtering for packets that contain IP address A or IP address B in any IP field (source or destination), the filter returns all packets that have A, or have B, or have both. Packets that have only A, or only B, are included, as would packets that have both A and B. If you used AND instead, you would only include packets that contain both addresses in the same packet.