nerdexam
CompTIA

SY0-301 · Question #767

An administrator wishes to hide the network addresses of an internal network when connecting to the Internet. The MOST effective way to mask the network address of the users would be by passing the…

The correct answer is D. NAT. Network Address Translation (NAT) replaces the private internal IP addresses of outbound packets with one or more public IP addresses before traffic leaves the network. This hides the internal addressing scheme from the Internet, since external systems only see the public IP of…

Security architecture

Question

An administrator wishes to hide the network addresses of an internal network when connecting to the Internet. The MOST effective way to mask the network address of the users would be by passing the traffic through a:

Options

  • Astateful firewall.
  • Bpacket-filtering firewall.
  • CNIPS.
  • DNAT.

How the community answered

(22 responses)
  • A
    5% (1)
  • B
    9% (2)
  • D
    86% (19)

Explanation

Network Address Translation (NAT) replaces the private internal IP addresses of outbound packets with one or more public IP addresses before traffic leaves the network. This hides the internal addressing scheme from the Internet, since external systems only see the public IP of the NAT device (typically a firewall or router). A stateful firewall tracks connection state for filtering but does not mask internal IPs. A packet-filtering firewall inspects headers for allow/deny decisions but does not translate addresses. A NIPS (Network Intrusion Prevention System) detects and blocks malicious traffic but does not perform address translation.

Topics

#NAT#network address translation#network security#firewall

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice