352-001 · Question #110
When creating a network design, which one of these options provides for basic Layer 2 client isolation to prevent broadcast traffic exposure?
The correct answer is B. VLAN. VLANs provide basic Layer 2 client isolation by segmenting a switched network into separate broadcast domains so broadcast traffic cannot cross VLAN boundaries.
Question
When creating a network design, which one of these options provides for basic Layer 2 client isolation to prevent broadcast traffic exposure?
Options
- ASVI
- BVLAN
- Crouted port
- Dedge port
How the community answered
(21 responses)- A5% (1)
- B90% (19)
- D5% (1)
Why each option
VLANs provide basic Layer 2 client isolation by segmenting a switched network into separate broadcast domains so broadcast traffic cannot cross VLAN boundaries.
An SVI (Switched Virtual Interface) is a Layer 3 virtual interface used to enable inter-VLAN routing, not a mechanism that establishes Layer 2 broadcast domain boundaries.
A VLAN logically partitions a Layer 2 switched network into distinct broadcast domains, ensuring that broadcast frames generated by clients in one VLAN are never forwarded to clients in a different VLAN - providing fundamental isolation without requiring a routed boundary.
A routed port is a Layer 3 switchport that forwards packets between IP networks and does not define or segment Layer 2 broadcast domains.
An edge port is an STP optimization (PortFast) that bypasses the listening and learning states on end-device ports and has no effect on broadcast domain segmentation or client isolation.
Concept tested: VLAN-based Layer 2 broadcast domain isolation
Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/17-1/configuration_guide/vlan/b_171_vlan_9300_cg/configuring_vlans.html
Topics
Community Discussion
No community discussion yet for this question.