exam questions

Exam N10-008 All Questions

View all questions & answers for the N10-008 exam

Exam N10-008 topic 1 question 123 discussion

Actual exam question from CompTIA's N10-008
Question #: 123
Topic #: 1
[All N10-008 Questions]

A systems administrator is configuring a firewall using NAT with PAT. Which of the following would be BEST suited for the LAN interface?

  • A. 172.15.0.0/18
  • B. 172.18.0.0/10
  • C. 172.23.0.0/16
  • D. 172.28.0.0/8
  • E. 172.32.0.0/14
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Lu5ck
Highly Voted 2 years, 1 month ago
Network address translation (NAT) and Port address translation (PAT) are often used to translate between global and private ip addresses. Private address for Class B is 172.16.0.0 to 172.31.255.255. Only 172.23.0.0/16 fit the range.
upvoted 33 times
...
l3fty
Highly Voted 2 years, 2 months ago
Can anyone explain this one? I have no clue what this is about other than I know what the acronyms mean.
upvoted 12 times
itcamentor51
1 year, 7 months ago
The rest of the addresses besides the C, are for subnetworks.
upvoted 3 times
...
Nishkurup
1 year, 4 months ago
Class B private address is 172.16. 0.0/12 (addresses 172.16. 0.0 through 172.31. 255.255 inclusive). All answers other C falls outside the range.
upvoted 4 times
user82
1 year, 1 month ago
I think you meant 172.16.0.0/16. /12 is class A, not B
upvoted 3 times
...
...
...
phoenix98
Most Recent 6 months, 1 week ago
Selected Answer: C
Private IP addresses can be drawn from one of the pools of addresses defined in RFC 1918 as non-routable over the Internet: • 10.0.0.0 to 10.255.255.255 (Class A private address range). • 172.16.0.0 to 172.31.255.255 (Class B private address range). The answer is in this range. • 192.168.0.0 to 192.168.255.255 (Class C private address range).
upvoted 2 times
...
TheFivePips
8 months, 3 weeks ago
Selected Answer: C
NAT and PAT translate private IPs to public IPs, so we're seeking a private IP. Addresses 172.16.0.0 - 172.31.255.255 are private, excluding options A and E. Using CIDR, consider the remaining answers: Answer B) 172.18.0.0/10 has subnet mask 255.192.0.0 (10 network bits). To find network address we need to do a bitwise "AND" operation with the IP and subnet mask: Comparing bits side by side. If both bits are 1 it's a 1. If any bit is a 0 it’s a 0. Subnet mask: 11111111.11000000.00000000.00000000(255.192.0.0) IP address: 10101100.00010010.00000000.00000000(172.18.0.0) Result: 10101100.00000000.00000000.00000000 (172.0.0.0) Network: 172.0.0.0 Range: 172.0.0.1-172.63.255.254 Broadcast: 172.63.255.255 Answer D) Repeat for this address. Both answers are beyond private range. Answer C is the only one left but you can confirm it with above methods.
upvoted 8 times
...
MitchF
9 months ago
GPT gets this one wrong. Here is how I find the correct answer: (A) 172.15.0.0/18 - wrong, it is a public IP (B) 172.18.0.0/10 - private IP (good) --> but subnet doesn't offer the most available IP addresses (4 million+) (C) 172.23.0.0/16 - private IP (good) --> but subnet doesn't offer the most available IP addresses (65 thousand) **(D) 172.28.0.0/8 - private IP (good) --> AND subnet offers the MOST available IP addresses (16 million+) = best answer (E) 172.32.0.0/14 - wrong, it is a public IP So it looks like the best answer is (D) PS. I will check with my boss who is a Developer and update this answer if it is wrong.
upvoted 2 times
...
JakeCharles
1 year, 3 months ago
Selected Answer: C
C. 172.23.0.0/16 Network Address Translation (NAT) with Port Address Translation (PAT) is used to translate the private IP addresses of hosts on a LAN to a single public IP address assigned to the firewall. The LAN interface of the firewall typically uses a private IP address range, such as those defined by RFC 1918, that is not globally routable. 172.15.0.0/18, 172.18.0.0/10, 172.28.0.0/8, and 172.32.0.0/14 are all valid private IP address ranges, but 172.23.0.0/16 is commonly used for LAN interfaces in NAT/PAT configurations.
upvoted 3 times
StevenElev11n
1 year, 3 months ago
How do you get 172.15.0.0/18 and 172.32.0.0/14 to be private IP addresses?
upvoted 4 times
famco
1 year, 1 month ago
Pure imagination and being wrong. :). It is not private IP range.
upvoted 2 times
...
...
...
examtopics11
1 year, 5 months ago
Selected Answer: C
see below
upvoted 2 times
...
homealone
2 years, 2 months ago
can anybody explain this for me? thanks
upvoted 2 times
examtopics11
1 year, 5 months ago
BCD are only IPs where the first 2 octets fall in Class B Private IP range mentioned by Lu5ck. Of those, CIDR 16 keeps the subnet 255.255.0.0 which keeps 172.23 the same. CIDR 10 and CIDR 8 would change the (23 octet) value to fall outside the private IP range for class B.
upvoted 12 times
famco
1 year, 1 month ago
Adding on to Lu5ck and cyberninja, the reasoning is not just about the classes, but the octets. It is 172.16.0.0/12 to 172.31.0.0/12 range that is RFC 1918. If it is a /8 or /10 it is not in that range. But a 172.16.0.0/12 range can be further sub-netted by using more bits for subnets. So a 172.28.0.0/16 is also in that range
upvoted 2 times
...
vitasaia
1 year, 3 months ago
Best Answer! Genius!!
upvoted 2 times
...
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago