CISSP · Question #577
Which of the following is the primary advantage of segmenting Virtual Machines (VM) using physical networks?
The correct answer is A. Simplicity of network configuration and network monitoring. Physical network segmentation of VMs leverages existing hardware-based network boundaries, making configuration and monitoring straightforward compared to virtual overlay approaches.
Question
Which of the following is the primary advantage of segmenting Virtual Machines (VM) using physical networks?
Options
- ASimplicity of network configuration and network monitoring
- BRemoves the need for decentralized management solutions
- CRemoves the need for dedicated virtual security controls
- DSimplicity of network configuration and network redundancy
How the community answered
(28 responses)- A93% (26)
- B4% (1)
- C4% (1)
Why each option
Physical network segmentation of VMs leverages existing hardware-based network boundaries, making configuration and monitoring straightforward compared to virtual overlay approaches.
When VMs are segmented using physical networks (e.g., separate physical switches, VLANs at the hardware level, or dedicated NICs), the network topology maps directly to physical infrastructure, simplifying both configuration and monitoring since traffic flows are visible and manageable through standard network tools without requiring additional virtual network inspection layers.
Physical network segmentation does not remove the need for centralized or decentralized management solutions; administrators still require management platforms to oversee hypervisors, VMs, and the physical network infrastructure itself.
Physical segmentation does not eliminate the need for dedicated virtual security controls such as virtual firewalls or host-based security tools, as threats can still originate from within the same physical segment or from compromised VMs.
While physical networks can support redundancy, redundancy is not a primary inherent advantage of physical VM segmentation itself and typically requires additional hardware configuration (e.g., NIC teaming, STP), making it a separate concern rather than a direct benefit of the segmentation strategy.
Concept tested: Physical network segmentation advantages for VM isolation
Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-125B.pdf
Topics
Community Discussion
No community discussion yet for this question.