Explain How Network Addresses Impact Network Security 100-160 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A small business has a single public IP address from its ISP and 20 internal servers that need to be reachable from the internet. The administrator configures port forwarding on the router. Which statement best describes the security implication of this setup?

   • AThe internal servers are no longer able to communicate with each other because NAT changes their MAC addresses.
   • BOnly the forwarded ports on the internal servers are exposed to the internet, while other ports remain unreachable from outside.
   • CThe internal servers are fully protected because their private IP addresses are hidden.
   • DThe internal servers are directly reachable using their private IP addresses from the internet.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   How does network segmentation improve network performance?

   • ABy increasing the number of devices on a single segment
   • BBy eliminating the need for routing
   • CBy encrypting all traffic between segments
   • DBy reducing the size of broadcast domains
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A company is implementing network segmentation to protect its payment card processing systems. The compliance requirement mandates that the payment systems be isolated from the general corporate network. The company has a /24 network for the corporate LAN and a /24 network for the payment systems. The security team wants to ensure that only the payment application server can communicate with the corporate database server. Which configuration is most appropriate?

   • AUse a router with a default route between the subnets and no access control lists.
   • BUse a VLAN with private VLANs to isolate the servers from each other.
   • CUse a firewall between the two subnets and create an allow rule for the specific source and destination IP addresses and ports.
   • DPlace both servers in the same VLAN and rely on host-based firewalls.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A network engineer is migrating a small office from IPv4 to IPv6. The office uses a single router with a /64 IPv6 prefix from the ISP. The engineer wants to segment the network into multiple VLANs, each with its own subnet. What is the most efficient way to create subnets from the /64 prefix?

   • AUse the same /64 prefix for all VLANs and enable NAT to separate them.
   • BSubnet the /64 prefix into smaller prefixes, such as /72, /80, or /96, to create multiple subnets.
   • CUse the /64 prefix as a single subnet and rely on VLANs to separate traffic.
   • DRequest a larger prefix from the ISP, such as a /48, and assign a /64 to each VLAN.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company has a flat network with all devices in the same /24 subnet. After a malware outbreak, the security team wants to segment the network to contain future infections. They plan to create separate subnets for different departments. Which approach is most effective?

   • ACreate separate IP subnets for each department and use a firewall or router with access control lists to control traffic between them.
   • BCreate VLANs and assign each department to a different VLAN, but keep the same IP subnet for all VLANs.
   • CUse MAC address filtering on the switch to allow only authorized devices on the network.
   • DAssign different IP addresses to each department but keep them in the same subnet with a larger mask.
   Reveal Solution Discussion Select an answer first