Exam SY0-501 topic 1 question 36 discussion

securing internal routing with VPN?? This one doesnt make sense...

Nowadays corporations have satellite offices, the communications between these remote locations are still internal with VPN concentrators, therefore VPN is the answer.

NAT seemed the logical answer but it does not do anything with routing. It only changes IPs from private to public and vice versa. PAT is similar to NAT but it only changes ports (port forwarding). DMZ also doesn't have much to do with routing. Its purpose is to separate more trustworthy network segments from the less trustworthy. Hosts may still know about routes between zones but they may not be able to access them. Out of these 4 answers, VPN makes actually the most sense. I agree the question, as usually is vague, but let's consider this: A company sets up site-to-site and client VPNs. When a user connects to his VPN, it will likely download internal routes that would allow him to go to internal resources. Same with site-to-site VPN. Normally a VPN hub would advertise routes to the company internal network and a site would advertise its subnet(s). In each case it would look like a site or a client are within the same network. For the public Internet all the routes would be hidden within encrypted ESP packets. Another vague & poorly written question...

The way I believe is that router is placed in side of network to manage internal network and go outside to public. Now, that is when VPN comes in it will provide a split tunnel and protect the internal and external traffic.

virtual private network (VPN) gives you online privacy and anonymity by creating a private network from a public internet connection. VPNs mask your internet protocol (IP) address so your online actions are virtually untraceable.

VPN is just the least wrong answer available. GJ comptia

I think there is a mistake , using vpn to secure internal routing dose not make any sense. the only case to use vpn is to secure connection from the outside to the internal network.

I think it's vpn

C VPN will secure while NAT will hide. Question says "securing internal routing" not "hiding internal routing."

Unless we have information missing and there is more to this question, then I don't think it is VPN, since VPN secures external routing. We might be talking about securing internal routing between satellite sites, but the question says nothing about this. DMZ doesn't secure internal routing since it is by design, public facing. I think NAT is very likely the correct answer, since NAT is used to map public IP addresses to private IP addresses, thus securing internal routing information from the outside.

I think the question is incomplete. Protect internal routing behind a firewall or router from external entities. It could be NAT.

confusing but, elimination method.. only VPN can restrict between subnets..

This might sound dumb but, does internal routing means routing the data b/w two internal devices or from outside network to an internal device.? Idk why, but answer VPN is a bit unsettling.

VPNs are usually used in corporations to safeguard the data of an internal aspect. Securing INTERNAL routing can only be done via a VPN in this instance.