Which technology hides internal network topology by separating internal and external IP addressing and acts as a choke point for traffic?

Which technology hides internal network topology by separating internal and external IP addressing and acts as a choke point for traffic?

• A. Network Address Translation
• B. Low-Interaction Honeypots
• C. Application-Level Proxy
• D. Stateful Firewall

Answer: (A)

Network Address Translation hides internal network topology by translating private, internal IP addresses to a public IP when traffic leaves the network, and vice versa for responses. By separating internal and external addressing, outsiders see only the public address, so the internal layout and address scheme remain invisible. NAT devices typically sit at the network edge and handle all traffic crossing the boundary, which makes them a bottleneck or choke point where translation and policy enforcement happen. Low-Interaction Honeypots are decoys used for luring and studying attackers, not for concealing internal addressing or shaping traffic at the network boundary. An Application-Level Proxy can hide the details of backend servers at the application layer, but it operates differently from IP-layer address translation and isn’t primarily about separating internal from external IP addressing. A Stateful Firewall tracks connection state to enforce rules, but its main function isn’t to obscure internal topology through address translation.

Network Address Translation hides internal network topology by translating private, internal IP addresses to a public IP when traffic leaves the network, and vice versa for responses. By separating internal and external addressing, outsiders see only the public address, so the internal layout and address scheme remain invisible. NAT devices typically sit at the network edge and handle all traffic crossing the boundary, which makes them a bottleneck or choke point where translation and policy enforcement happen.

Low-Interaction Honeypots are decoys used for luring and studying attackers, not for concealing internal addressing or shaping traffic at the network boundary. An Application-Level Proxy can hide the details of backend servers at the application layer, but it operates differently from IP-layer address translation and isn’t primarily about separating internal from external IP addressing. A Stateful Firewall tracks connection state to enforce rules, but its main function isn’t to obscure internal topology through address translation.