Question

A security administrator is creating a subnet on one of the corporate firewall interfaces to use as a DMZ which is expected to accommodate at most 14 physical hosts. Which of the following subnets would BEST meet the requirements?

A) 192.168.1.0/28
B) 10.0.0.0/30
C) 172.16.0.0/29
D) 192.168.0.0/27

Answer 1

Option A: The best subnet to accommodate at most 14 physical hosts for a DMZ is option A) 192.168.1.0/28, as it provides exactly 16 IP addresses, sufficient for 14 hosts plus the necessary network and broadcast addresses.

Step-by-step explanation:

The question asks which subnet would best accommodate at most 14 physical hosts for a DMZ (DeMilitarized Zone). The subnet chosen must have enough usable IP addresses for 14 hosts, plus one for the network address and one for the broadcast address, totaling 16 IP addresses needed.

The answer is A) 192.168.1.0/28.

This is because a /28 subnet provides 16 IP addresses, from which 14 can be used for hosts, one is the network address (192.168.1.0), and one is the broadcast address (192.168.1.15). Options B) 10.0.0.0/30 and C) 172.16.0.0/29 do not offer enough IP addresses for 14 hosts as they provide only 2 and 6 usable IPs, respectively. Option D) 192.168.0.0/27 offers 32 IP addresses, which exceeds the requirement and is less efficient in this case.