A technician needs to harden a wireless small office home office (SOHO) network so that internal IP addresses are hidden from Internet users. Which of the following should the technician configure?

NAT translates private internal IP addresses (such as 192.168.x.x) to a single public IP address as packets traverse the router to the Internet, effectively masking the internal network topology from external users. This is the primary mechanism used in SOHO routers to provide both Internet access and IP address concealment for all internal devices.

Port forwarding maps specific external ports to internal hosts and actually exposes internal services to the Internet, which is the opposite of hiding internal addresses.

QoS (Quality of Service) manages traffic prioritization and bandwidth allocation - it does not perform address translation or hide internal IPs.

Disabling SSID broadcast hides the wireless network name from casual discovery but has no effect on IP address visibility to Internet users.