nerdexam
GIAC

GSEC · Question #155

Which of the following works at the network layer and hides the local area network IP address and topology?

The correct answer is A. Network address translation (NAT). NAT operates at the network layer (Layer 3) and translates private internal IP addresses to a public address, concealing internal network topology from outside networks.

Networking and Core Concepts

Question

Which of the following works at the network layer and hides the local area network IP address and topology?

Options

  • ANetwork address translation (NAT)
  • BHub
  • CMAC address
  • DNetwork interface card (NIC)

How the community answered

(22 responses)
  • A
    82% (18)
  • B
    9% (2)
  • C
    5% (1)
  • D
    5% (1)

Why each option

NAT operates at the network layer (Layer 3) and translates private internal IP addresses to a public address, concealing internal network topology from outside networks.

ANetwork address translation (NAT)Correct

Network Address Translation functions at Layer 3 of the OSI model, replacing private RFC 1918 source IP addresses in outbound packets with the router's public IP. This prevents external hosts from seeing or directly routing to internal LAN addresses, effectively hiding both individual host IPs and the internal network topology.

BHub

A hub is a Layer 1 physical device that simply repeats electrical signals to all ports and has no awareness of IP addresses or topology.

CMAC address

A MAC address is a Layer 2 hardware identifier assigned to a network interface card and does not operate at the network layer or hide IP topology.

DNetwork interface card (NIC)

A Network Interface Card (NIC) is the hardware adapter that connects a device to a network and does not perform address translation or topology concealment.

Concept tested: NAT operation at Layer 3 hiding internal IP topology

Source: https://learn.microsoft.com/en-us/azure/virtual-network/nat-gateway/nat-overview

Topics

#NAT#network layer#IP masking#topology hiding

Community Discussion

No community discussion yet for this question.

Full GSEC Practice