100-160 Question 75
Select 3Your company is redesigning its network architecture to improve security and scalability. The plan involves segmenting the network into smaller subnets and using private IPv4 addresses for internal communication. Which of the following statements are correct about this setup?
- A
Private IPv4 addresses, such as 192.168.0.0/16, cannot communicate with public IPv4 addresses without Network Address Translation (NAT).
- B
Using CIDR notation allows the creation of subnets with variable sizes to efficiently allocate IP addresses.
- C
MAC addresses are used instead of IP addresses to route packets between subnets.
- D
IPv6 does not differentiate between private and public addresses like IPv4 does.
- E
Network segmentation improves security by isolating different parts of the network to reduce the spread of threats.
Show answer and explanation
Correct answers: A, B, E
Explanation
This question assesses understanding of private IPv4 addressing, CIDR notation, and the benefits of network segmentation in improving security and scalability. Private addresses require NAT for external communication, CIDR allows efficient subnetting, and segmentation enhances security by isolating traffic. MAC addresses are not used for routing between subnets, and IPv6 does differentiate between private and public addresses.
- A. Correct.
Correct: Private IPv4 addresses are not routable on the public internet and require NAT to communicate with public IPv4 addresses.
- B. Correct.
Correct: CIDR (Classless Inter-Domain Routing) allows for flexible subnetting, which is essential for efficient IP address management.
- C. Incorrect.
Incorrect: MAC addresses are used for local communication within the same network segment. Routing between subnets relies on IP addresses, not MAC addresses.
- D. Incorrect.
Incorrect: IPv6 differentiates between global unicast (public) and unique local (private) addresses, similar to IPv4's public and private addressing.
- E. Correct.
Correct: Network segmentation isolates traffic, which enhances security by minimizing the potential impact of a breach.