100-150 Question 63
Single answerA company is setting up a new network and wants to ensure that internal devices such as printers, servers, and employee workstations are protected from direct access by external users over the internet. Which type of IP address should the company assign to these internal devices, and why?
- A
Public IP addresses, because they allow direct communication with the internet.
- B
Private IP addresses, because they are not routable on the internet and provide internal network isolation.
- C
Public IP addresses, because they are globally unique and prevent IP conflicts within the network.
- D
Private IP addresses, because they are automatically secured by internet service providers (ISPs).
Show answer and explanation
Correct answer: B
Explanation
Private IP addresses are designed for use within internal networks and are not routable on the internet, ensuring that devices like printers and workstations remain isolated and protected. They require NAT to communicate externally, making them a secure and efficient choice for internal device addressing. Public IP addresses, on the other hand, are meant for devices that need direct access to the internet, which is not appropriate for internal network devices.
- A. Incorrect.
Public IP addresses allow devices to communicate directly over the internet, but they expose the devices to potential security risks and do not provide the isolation needed for internal networks.
- B. Correct.
Private IP addresses are not routable on the internet, making them ideal for internal devices. They provide internal network isolation and require NAT (Network Address Translation) to communicate externally.
- C. Incorrect.
While public IP addresses are globally unique, their primary purpose is for devices or services that need direct, unrestricted access to the internet, which is not suitable for internal devices.
- D. Incorrect.
ISPs do not automatically secure private IP addresses. Private IP addresses are inherently protected from direct internet access due to their non-routable nature, but security must still be configured within the local network.