In the described unconventional IP value handling, which source IPs entering state is listed?

• A. IPs in network range, private addresses, and loopback
• B. Broadcast addresses
• C. Public Internet addresses
• D. Multicast addresses

Answer: (A)

Think about how a stateful analysis or firewall tracks conversations. Some traffic comes from sources that aren’t globally routable on the open Internet, yet they’re still part of internal networks and must be accounted for in state tables. Those unconventional IP values include addresses from private blocks (like 10/8, 172.16–172.31, 192.168/16), as well as loopback addresses. These are entering state because internal hosts and NAT’d paths generate genuine traffic that needs to be tracked, even though those addresses aren’t reachable on the public Internet. By listing these, the system ensures internal communications aren’t misinterpreted or dropped, and it can accurately observe and NAT-rewrite flows.

Broadcast addresses aren’t used as legitimate unicast sources, public Internet addresses are globally routable and handled in the standard way, and multicast addresses are typically destinations for group traffic rather than sources for entering state in this context.