CISSP-ISSAP · Question #150
Your customer is concerned about security. He wants to make certain no one in the outside world can see the IP addresses inside his network. What feature of a router would accomplish this?
The correct answer is B. NAT. NAT (Network Address Translation) is correct because it translates private internal IP addresses into a single public IP address before traffic leaves the network - meaning external parties only ever see the router's public IP, never the internal addresses like 192.168.x.x. Port
Question
Your customer is concerned about security. He wants to make certain no one in the outside world can see the IP addresses inside his network. What feature of a router would accomplish this?
Options
- APort forwarding
- BNAT
- CMAC filtering
- DFirewall
How the community answered
(43 responses)- A7% (3)
- B88% (38)
- C2% (1)
- D2% (1)
Explanation
NAT (Network Address Translation) is correct because it translates private internal IP addresses into a single public IP address before traffic leaves the network - meaning external parties only ever see the router's public IP, never the internal addresses like 192.168.x.x.
- Port forwarding (A) is a feature built on top of NAT, but it does the opposite of hiding - it exposes specific internal services to the outside world.
- MAC filtering (C) controls which devices can join a network based on hardware addresses, but MAC addresses aren't visible to the outside internet at all, so this solves a different problem.
- Firewall (D) blocks or allows traffic based on rules, but it doesn't hide or translate IP addresses - internal IPs can still appear in packet headers that pass through.
Memory tip: Think of NAT as a receptionist - all outside callers only get the front desk number (public IP), never the direct extensions of people inside the office (private IPs).
Topics
Community Discussion
No community discussion yet for this question.