Which practice obscures IP addressing as part of network security controls?

Which practice obscures IP addressing as part of network security controls?

• A. Use NAT to expose internal addresses publicly.
• B. Do not use any NAT or proxy to obscure addresses.
• C. Remove route advertisements to internal networks.
• D. NAT, placing servers behind proxy servers, and removal of route advertisements are methods to obscure IP addressing.

Answer: (D)

Obscuring IP addressing is about hiding internal network addresses from the outside so the layout of the network isn’t easily discoverable. NAT hides internal IPs by translating them to public addresses, so external observers see only the mapped public addresses. Placing servers behind proxy servers adds a layer between clients and the real servers, preventing direct exposure of internal IPs. Removing route advertisements keeps internal networks from being advertised in global routing tables, making it harder for outsiders to learn internal topology. Taken together, NAT, proxies, and the removal of internal route advertisements provide multiple layers to obscure IP addressing. The option that mentions all three together reflects this combined approach, whereas the other options describe incomplete or opposite strategies.

Obscuring IP addressing is about hiding internal network addresses from the outside so the layout of the network isn’t easily discoverable. NAT hides internal IPs by translating them to public addresses, so external observers see only the mapped public addresses. Placing servers behind proxy servers adds a layer between clients and the real servers, preventing direct exposure of internal IPs. Removing route advertisements keeps internal networks from being advertised in global routing tables, making it harder for outsiders to learn internal topology. Taken together, NAT, proxies, and the removal of internal route advertisements provide multiple layers to obscure IP addressing. The option that mentions all three together reflects this combined approach, whereas the other options describe incomplete or opposite strategies.