Certified Network Defender (CND) — Question 28

Steven's company has recently grown from 5 employees to over 50. Every workstation has a public IP address and navigated to the Internet with little to no protection. Steven wants to use a firewall. He also wants IP addresses to be private addresses, to prevent public Internet devices direct access to them. What should Steven implement on the firewall to ensure this happens?

Answer options

• A. Steven should use Open Shortest Path First (OSPF).
• B. Steven should enable Network Address Translation (NAT).
• C. Steven should use a Demilitarized Zone (DMZ).
• D. Steven should use IPsec.

Correct answer: B

Explanation

The correct answer is B, as enabling Network Address Translation (NAT) allows private IP addresses to be used within the network while translating them to a public IP address for Internet access, thereby preventing direct access to internal devices. Options A, C, and D do not specifically address the need for private IP addressing or protecting internal devices from public access.