Personally I filter out 100 % of employers that think tests like these are viable filtering criteria.
Apologies in advance if I'm missing something obvious here, but are you saying an IP allow list is not a standard security practice? If so I'd appreciate further explanation.