Explain How Network Addresses Impact Network Security 100-160 Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A company is migrating from IPv4 to IPv6. The security team is concerned about the visibility of internal hosts. In IPv4, NAT hides internal addresses. In IPv6, the company plans to use global unicast addresses for all hosts. Which security control should be implemented to maintain the privacy of internal hosts?

   • AUse link-local addresses for all internal communication.
   • BUse privacy extensions for IPv6 (RFC 4941) to generate temporary random interface identifiers for outbound connections.
   • CUse IPv6 NAT (NAT66) to hide internal addresses.
   • DUse unique local addresses (ULA) for all internal hosts and do not provide internet access.
   Reveal Solution Discussion Select an answer first
2. 27application · easy

   A company's web server must be reachable from the internet, but the server currently has a private IP address of 192.168.1.10. The administrator configures NAT on the router. Which IP address will the internet client see as the source of the response?

   • A192.168.1.10
   • BThe public IP address of the router's WAN interface
   • CThe MAC address of the web server
   • DThe default gateway's MAC address
   Reveal Solution Discussion Select an answer first
4. 28expert · medium

   A company uses a single public IP address for all outbound internet traffic. The security team wants to track which internal device sent a specific outbound request. The NAT log shows only the public IP address and the destination. What additional information is needed to identify the internal device?

   • AThe destination IP address only
   • BThe internal source IP address and source port
   • CThe destination MAC address
   • DThe router's MAC address
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A network engineer is troubleshooting why a device with IPv6 address 2001:db8::1 cannot communicate with a device on a different subnet. The engineer checks the routing table and finds no route for the destination. What is the most likely missing configuration?

   • AThe MAC address of the destination device
   • BThe subnet mask in dotted decimal notation
   • CThe default gateway IPv6 address
   • DThe DNS server address
   Reveal Solution Discussion Select an answer first
6. 30application · easy

   A technician is explaining to a junior admin why a device with IP address 192.168.1.100 and subnet mask 255.255.255.0 cannot communicate with a device at 192.168.2.10. Which explanation is correct?

   • AThe devices are on different subnets, so the traffic must be routed through a router or Layer 3 switch.
   • BThe devices are using private IP addresses, which cannot communicate over a LAN.
   • CThe subnet mask is incorrect because it should be 255.255.255.128.
   • DThe devices have different MAC addresses, so they cannot communicate.
   Reveal Solution Discussion Select an answer first