How does a subnet mask determine which part of an IP address is the network portion versus the host portion?