nerdexam
(ISC)2

CISSP · Question #577

Which of the following is the primary advantage of segmenting Virtual Machines (VM) using physical networks?

The correct answer is A. Simplicity of network configuration and network monitoring. Physical network segmentation of VMs leverages existing hardware-based network boundaries, making configuration and monitoring straightforward compared to virtual overlay approaches.

Submitted by rachelw· Mar 5, 2026Communication and Network Security

Question

Which of the following is the primary advantage of segmenting Virtual Machines (VM) using physical networks?

Options

  • ASimplicity of network configuration and network monitoring
  • BRemoves the need for decentralized management solutions
  • CRemoves the need for dedicated virtual security controls
  • DSimplicity of network configuration and network redundancy

How the community answered

(28 responses)
  • A
    93% (26)
  • B
    4% (1)
  • C
    4% (1)

Why each option

Physical network segmentation of VMs leverages existing hardware-based network boundaries, making configuration and monitoring straightforward compared to virtual overlay approaches.

ASimplicity of network configuration and network monitoringCorrect

When VMs are segmented using physical networks (e.g., separate physical switches, VLANs at the hardware level, or dedicated NICs), the network topology maps directly to physical infrastructure, simplifying both configuration and monitoring since traffic flows are visible and manageable through standard network tools without requiring additional virtual network inspection layers.

BRemoves the need for decentralized management solutions

Physical network segmentation does not remove the need for centralized or decentralized management solutions; administrators still require management platforms to oversee hypervisors, VMs, and the physical network infrastructure itself.

CRemoves the need for dedicated virtual security controls

Physical segmentation does not eliminate the need for dedicated virtual security controls such as virtual firewalls or host-based security tools, as threats can still originate from within the same physical segment or from compromised VMs.

DSimplicity of network configuration and network redundancy

While physical networks can support redundancy, redundancy is not a primary inherent advantage of physical VM segmentation itself and typically requires additional hardware configuration (e.g., NIC teaming, STP), making it a separate concern rather than a direct benefit of the segmentation strategy.

Concept tested: Physical network segmentation advantages for VM isolation

Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-125B.pdf

Topics

#Network segmentation#Virtualization security#Physical network separation#Network monitoring

Community Discussion

No community discussion yet for this question.

Full CISSP Practice