A company has a server that must be accessible from the internet. The server currently has a private IP. The network has a firewall and a router with one public IP. Which solution provides the most flexible inbound access while minimizing the number of public IPs used?

Use static NAT to map the public IP to the server.

Use PAT port forwarding to map specific ports on the public IP to the server.

Assign a public IP to the server directly.

Place the server in a DMZ with a private IP and no NAT.

What is a security implication of using private IP addresses on an internal network?

Private addresses are automatically protected by NAT, which encrypts all traffic.

Private addresses are not directly reachable from the internet, which provides a layer of obscurity but not complete security.

Private addresses are inherently encrypted, so they provide strong security.

Private addresses are more vulnerable to attacks because they are widely known.

In a typical NAT translation, what does the router change in an outbound packet?

The destination port to a well-known port number.

The source MAC address to the MAC address of the default gateway.

The destination IP address from the public address to the private address of the internal host.

The source IP address from the private address to the public address of the router.

A company wants to host a web server that must be reachable from the internet. The server will be placed in a DMZ. Which type of IP address should be assigned to the server's public-facing interface?

A link-local address from 169.254.0.0/16

A public IP address from the ISP's allocation

A loopback address from 127.0.0.0/8

A private IP address from the 10.0.0.0/8 range

CiscoCertified Support Technician (CCST) Networking

Domain 2Objective 1

2.1. Compare and Contrast Private Addresses and Public Addresses. 100-150 Practice Questions (Page 7)

Part of the Addressing and Subnet Formats domain, which makes up ~11% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~2–4 in this domain), expect 1–1 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

5concepts

Questions 31–35

31expert · hard
A company has a server that must be accessible from the internet. The server currently has a private IP. The network has a firewall and a router with one public IP. Which solution provides the most flexible inbound access while minimizing the number of public IPs used?
Select an answer first
32foundation · easy
What is a security implication of using private IP addresses on an internal network?
Select an answer first
33foundation · easy
In a typical NAT translation, what does the router change in an outbound packet?
Select an answer first
34application · medium
A company wants to host a web server that must be reachable from the internet. The server will be placed in a DMZ. Which type of IP address should be assigned to the server's public-facing interface?
Select an answer first
35expert · hard
A network engineer is reviewing a legacy network that uses classful addressing. The network has a Class C address 192.168.1.0 with a default subnet mask. The engineer needs to create 4 subnets, each with at least 50 hosts. Which subnet mask should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-150

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-150” is a trademark of its owner, used for identification only.