Question

Your organization is increasing security and wants to prevent attackers from mapping out the IP addresses used on your internal network. Which of the following choices is the BEST option?

A.) Implement subnetting.
B.) Implement secure zone transfers.
C.) Block outgoing traffic on UDP port 53.
D. )Add a WAF.

Answer 1

Implement subnetting is the BEST option to prevent attackers from mapping out IP addresses on the internal network.

Step-by-step explanation:

The BEST option to prevent attackers from mapping out the IP addresses used on the internal network is to implement subnetting. Subnetting involves dividing a network into smaller, more manageable subnets, which helps to isolate different parts of the network and restrict access between them. By using subnetting, an organization can segment their internal network and limit the visibility of IP addresses to attackers.

Implementing secure zone transfers (option B) is related to the DNS (Domain Name System) and involves controlling the replication of DNS data between authoritative DNS servers. While it can help enhance security, it focuses on protecting DNS zone information rather than IP address mapping.

Blocking outgoing traffic on UDP port 53 (option C) is a specific measure to restrict connections using the DNS protocol. However, it does not directly address the goal of preventing attackers from mapping out IP addresses on the internal network.

Adding a WAF (Web Application Firewall) (option D) is a security measure to protect web applications from various types of attacks. While it can help secure web applications, it does not specifically address the issue of mapping out IP addresses on the internal network.