100-160 Question 71
Select 3You are configuring a network for a small office. The office has multiple devices that need internet access, but the ISP has only provided a single public IPv4 address. To maximize security and internal organization, you decide to segment the local network into two subnets: one for employee devices and another for IoT devices. Which combination of techniques should you implement to meet these requirements?
- A
Use NAT to allow devices on the private subnets to share the public IPv4 address for internet access.
- B
Assign public IPv6 addresses to all devices in the office to avoid the need for NAT.
- C
Use CIDR notation to define the subnets and allocate private IP ranges appropriately.
- D
Assign MAC addresses to all devices manually to ensure unique identification across both subnets.
- E
Configure the subnets using private IPv4 addresses and ensure they are isolated using VLANs.
Show answer and explanation
Correct answers: A, C, E
Explanation
To meet the requirements, NAT is necessary to allow devices on private subnets to share the single public IPv4 address provided by the ISP. CIDR notation is used to define the subnets and allocate IP ranges efficiently. Private IPv4 addresses ensure internal devices are not directly accessible from the public internet, and VLANs provide logical isolation between the employee and IoT device subnets. IPv6 and manual MAC address assignment are not relevant solutions for the given scenario.
- A. Correct.
Correct: NAT (Network Address Translation) allows multiple devices on private networks to share a single public IP address for internet access, which is essential when only one public IPv4 address is provided.
- B. Incorrect.
Incorrect: While IPv6 eliminates the need for NAT, this option is not viable here because the ISP has only provided a single public IPv4 address, not IPv6 addresses.
- C. Correct.
Correct: CIDR (Classless Inter-Domain Routing) is used to define subnets and allocate IP addresses efficiently, which is necessary to segment the network.
- D. Incorrect.
Incorrect: MAC addresses are unique to hardware devices and are automatically assigned by the manufacturer. Manually assigning them is unnecessary and unrelated to network segmentation or NAT.
- E. Correct.
Correct: Using private IPv4 addresses ensures that the subnets are isolated from the public internet, while VLANs (Virtual LANs) provide logical segmentation of the network for security and organization.