Well, a network mask is by definition always a sequence of 1s followed by 0s (in other words, you can’t arbitrarilly have some bits be 0 in between bits which are 1), so that /24 in CIDR notation is literally “/” + the number of bits in the network mask which have the value 1.
In other words, because of that “sequence of 1s followed by 0s” rule both 255.255.255.0 and /24 are just two different descriptions of the same network mask, first as 4 decimal numbers separated by dots, whilst the second as the count of bits in the binary representation of the mask which have the value 1.
For example, the 255.255.252.0 network mask from my first example in my last post could also be represented by /22 since the mask has 8+8+6 = 22 bits with value 1 and the rest are 0 - 192.168.0.0/22 means the same as 192.168.0.0/255.255.252.0
There is no point in having both that part of the CIDR representation and the decimal mask representation at the same time because they’re both different representations of the same thing so having both is redundant.








A Finance company which has its production systems in the same network as worker computers which aren’t locked-down tight is basically amateur hour every hour of the day every day of the month every month of the year.
You can never assume that workers won’t do stupid shit like downloading random software into their work computers even when its a fuckingly obvious bad idea for most people to do such stupid shit - it only takes one idiot, naive fool or even momentary distraction of somebody who should’ve known better, si always treat such devices as contaminated.