MENU
An administrator is tasked with creating a new subnet for a group of VMs that require inbound internet access. Internal private addresses must be obscured to servers on the public internet.
Which network is best suited for satisfying this requirement?
Suggested Answer: D
Get Premium NCP-CI-Azure Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
NAT Based Network: A NAT-based network is designed to provide inbound and outbound internet access while obscuring the internal private addresses. This setup uses Network Address Translation (NAT) to map internal IP addresses to a public IP address, ensuring that internal addresses are not exposed to the public internet.
Security and Connectivity: NAT provides a layer of security by hiding internal IP addresses and allowing controlled access to external resources. This configuration is well-suited for VMs that need to communicate with servers on the public internet while maintaining the privacy of their internal network addresses.
Azure Virtual Network NAT Documentation
Nutanix Networking and Security Configuration Guide
32 comments · newest first
KR
Krissy
10 months ago
Surprised NAT is the best option, thought there were better alternatives.
MA
Malcom
11 months ago
Definitely not No-NAT, that exposes everything!
NO
Nobuko
11 months ago
Wait, why not a Bastion based network? Seems like a solid choice too.
JA
Jamal
11 months ago
I agree, NAT helps keep internal IPs hidden.
AJ
Aja
11 months ago
NAT based network is the way to go for this!
IS
Isadora
11 months ago
I feel like No-NAT based networks could expose internal addresses, which doesn't fit the requirement. NAT based sounds safer.
MI
Mila
12 months ago
Layer 2 Stretch networks seem more about extending networks rather than providing internet access, so I doubt that's the answer.
TI
Timothy
12 months ago
I remember practicing a question similar to this, and I think Bastion networks were mentioned as a way to secure access, but I don't recall the details.
BE
Bea
1 year ago
I think the NAT based network might be the right choice since it hides internal IPs from the public internet, but I'm not completely sure.
DO
Dominque
1 year ago
Layer 2 stretch network? I don't think that's the right approach here. I'm pretty confident a NAT-based network is the way to go.
RO
Royal
1 year ago
The no-NAT based network doesn't seem to fit the requirement of obscuring the internal addresses, so I'm going to rule that one out.
IV
Ivette
1 year ago
A bastion-based network could work, but that might be overkill for just obscuring the internal addresses. I'm leaning more towards a NAT-based solution.
AL
Alex
1 year ago
Hmm, I'm a bit unsure about this one. I'll need to think through the requirements carefully to determine the best network type.
YE
Yen
1 year ago
This one seems pretty straightforward. I think a NAT-based network would be the best option to obscure the internal private addresses from the public internet.
MA
Marleen
2 years ago
C) Layer 2 Stretch network, because why not? Let's just stretch that network all the way to the moon and back!
BE
Beatriz
2 years ago
D) NAT based network
RO
Roxane
2 years ago
A) Bastion based network
AM
Amber
2 years ago
Hmm, I'm torn between A) Bastion based network and D) NAT based network. Decisions, decisions... At least I won't have to worry about pesky bastion hosts on the toilet.
JO
Jodi
2 years ago
True, Bastion based network adds an extra layer of security by requiring users to authenticate before accessing the VMs.
AL
Alline
2 years ago
But A) Bastion based network could also work well for controlling access to the VMs from the internet.
NA
Nathalie
2 years ago
Yeah, NAT based network is a common choice for providing security by hiding internal IP addresses.
FA
Fannie
2 years ago
I think D) NAT based network would be the best option for obscuring internal private addresses.
AI
Ailene
2 years ago
I believe No-NAT based network might not be the best choice as it doesn't provide address obscuring.
AD
Adela
2 years ago
I'm going with B) No-NAT based network. Why bother with all that NAT overhead when you can just expose the private IPs? Yolo!
EL
Elinore
2 years ago
I agree with you, B) No-NAT based network seems like the best option for this scenario.
SH
Sharen
2 years ago
I think D) NAT based network would be more secure and practical.
RO
Rocco
2 years ago
I'm not sure, but I think A) Bastion based network could also work for this requirement.
TA
Tasia
2 years ago
I agree with Vicky, NAT based network will obscure internal private addresses.
RO
Ronnie
2 years ago
D) NAT based network seems like the obvious choice here. Gotta keep those private IPs hidden from the big bad internet!
ER
Ernie
2 years ago
D) NAT based network seems like the obvious choice here. Gotta keep those private IPs hidden from the big bad internet!
JA
Jarvis
2 years ago
A) Bastion based network
VI
Vicky
2 years ago
I think the best option is D) NAT based network.