nerdexam
GIAC

GSEC · Question #151

Which of the following statements about Network Address Translation (NAT) are true? Each correct answer represents a complete solution. Choose two.

The correct answer is A. It reduces the need for globally unique IP addresses. C. It allows the computers in a private network to share a global, ISP assigned address to connect to. NAT conserves public IP space and allows private hosts to access the internet through a shared address, but it is not itself a security filtering mechanism or a method for exposing internal services.

Networking and Core Concepts

Question

Which of the following statements about Network Address Translation (NAT) are true? Each correct answer represents a complete solution. Choose two.

Options

  • AIt reduces the need for globally unique IP addresses.
  • BIt allows external network clients access to internal services.
  • CIt allows the computers in a private network to share a global, ISP assigned address to connect to
  • DIt provides added security by using Internet access to deny or permit certain traffic from the

How the community answered

(50 responses)
  • A
    84% (42)
  • B
    10% (5)
  • D
    6% (3)

Why each option

NAT conserves public IP space and allows private hosts to access the internet through a shared address, but it is not itself a security filtering mechanism or a method for exposing internal services.

AIt reduces the need for globally unique IP addresses.Correct

NAT allows many private hosts to share one or a few public IP addresses, directly reducing the global demand for unique IPv4 addresses.

BIt allows external network clients access to internal services.

Allowing external clients to reach internal services requires static NAT or port forwarding configuration specifically, which is a distinct feature from general NAT and is not a default NAT behavior.

CIt allows the computers in a private network to share a global, ISP assigned address to connect toCorrect

NAT translates private RFC-1918 addresses to a public ISP-assigned address, enabling all hosts on a private network to reach external internet resources through a single shared IP.

DIt provides added security by using Internet access to deny or permit certain traffic from the

Permitting or denying traffic based on policy is the function of a firewall or access control list, not NAT, which only performs address translation without traffic filtering.

Concept tested: Network Address Translation core functions

Source: https://learn.microsoft.com/en-us/azure/rtos/netx-duo/netx-duo-nat/chapter1

Topics

#NAT#network address translation#private addressing#IP conservation

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full GSEC Practice