Which option is a best practice when creating VLANs in the cell/area zone?

Question

Options

• ADesign maximum coverage cell/area zones and group multiple traffic types into one VLAN.
• BDesign large cell/area zones and segment traffic types into VLANs.
• CDesign individual cell/area zones and create a VLAN for every device.
• DDesign small cell/area zones and segment traffic types into VLANs.

• A
  4% (2)
• B
  11% (6)
• C
  4% (2)
• D
  82% (46)

Explanation

Designing small cell/area zones limits the blast radius of network issues and reduces broadcast domain size, while segmenting traffic types into VLANs (e.g., separating HMI, controller, and sensor traffic) improves security and performance in industrial/OT environments. Option A is wrong because grouping multiple traffic types into one VLAN defeats the purpose of segmentation and creates unnecessary broadcast noise. Option B is wrong because large zones increase the scope of any fault or security incident, making containment harder. Option C is wrong because creating a VLAN per device is operationally unmanageable and provides no logical traffic-type grouping.

Memory tip: Think "small and sorted" - small zones contain problems, sorted VLANs (by traffic type) isolate them. The two goals work together: zone size controls scope, VLAN segmentation controls separation.

No community discussion yet for this question.