100-160 Question 73
Select 2A company is setting up a new internal network for its employees. The IT team wants to ensure that devices within the network can communicate with each other using private IP addresses while still allowing access to the internet. Which of the following actions should the IT team take to achieve this?
- A
Assign IPv6 global unicast addresses to all devices within the network.
- B
Use private IPv4 addresses, such as those in the range 192.168.0.0/16, for internal devices.
- C
Implement NAT (Network Address Translation) to allow private IP addresses to communicate with external networks.
- D
Segment the network using VLANs to separate different departments within the company.
- E
Use CIDR notation to allocate smaller subnets within the private address range.
Show answer and explanation
Correct answers: B, C
Explanation
To set up an internal network that uses private IP addresses while allowing internet access, the IT team should assign private IPv4 addresses to internal devices and implement NAT. Private IP addresses ensure internal communication without exposure to the public internet, and NAT facilitates communication between the private network and external networks by translating private IPs to a public IP.
- A. Incorrect.
Assigning IPv6 global unicast addresses would expose the devices directly to the internet, which is not desired for an internal network.
- B. Correct.
Using private IPv4 addresses ensures devices within the network can communicate internally without being directly accessible from the internet, meeting one of the requirements.
- C. Correct.
Implementing NAT allows internal devices with private IP addresses to communicate with external networks like the internet by translating private addresses to a public IP.
- D. Incorrect.
While network segmentation with VLANs is useful for isolating traffic, it is not directly relevant to enabling private IP communication with the internet.
- E. Incorrect.
Using CIDR notation to allocate subnets is a good practice for network organization, but it does not directly address the need for communication with external networks.