A network administrator needs to logically separate traffic between different departments within an organization using a single physical network infrastructure. Which technology would be most appropriate to achieve this segmentation?
Virtual Local Area Networks (VLANs) are the most appropriate technology for logically separating traffic between departments on a single physical network infrastructure. VLANs work at Layer 2 of the OSI model and allow network administrators to create separate broadcast domains, essentially creating multiple virtual networks on the same physical switches and cabling. This provides traffic isolation, improved security, and better network management without requiring separate physical networks for each department.
While VPNs provide encrypted tunnels between networks, they are typically used for remote access or site-to-site connections rather than internal network segmentation. Subnetting operates at Layer 3 and involves IP addressing schemes but doesn't provide the same level of traffic isolation at the data link layer. Network Address Translation (NAT) is used to translate IP addresses and doesn't provide network segmentation capabilities.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What are VLANs and how do they work?
Open an interactive chat with Bash
What is the OSI model and why is Layer 2 important for VLANs?
Open an interactive chat with Bash
How do VLANs improve network security?
Open an interactive chat with Bash
ISC2 CISSP
Communication and Network Security
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
IT & Cybersecurity Package Join Premium for Full Access