SY0-301 · Question #391
An administrator needs to segment internal traffic between layer 2 devices within the LAN. Which of the following types of network design elements would MOST likely be used?
The correct answer is C. VLAN. VLANs are the standard Layer 2 mechanism for segmenting traffic between devices within the same LAN without requiring routing. They create logical broadcast domain boundaries on switches.
Question
An administrator needs to segment internal traffic between layer 2 devices within the LAN. Which of the following types of network design elements would MOST likely be used?
Options
- ARouting
- BDMZ
- CVLAN
- DNAT
How the community answered
(39 responses)- A5% (2)
- B3% (1)
- C92% (36)
Why each option
VLANs are the standard Layer 2 mechanism for segmenting traffic between devices within the same LAN without requiring routing. They create logical broadcast domain boundaries on switches.
Routing operates at Layer 3 and connects separate networks, not used to segment traffic between Layer 2 devices within the same LAN.
A DMZ is an architectural zone used to isolate public-facing servers from internal networks, not for segmenting internal LAN traffic.
VLANs (Virtual Local Area Networks) operate at Layer 2 and allow administrators to logically segment network traffic on switches. By assigning ports to different VLANs, devices in one VLAN cannot communicate with devices in another VLAN without going through a Layer 3 routing device, effectively isolating internal LAN segments.
NAT translates IP addresses between private and public address spaces and does not segment Layer 2 traffic within a LAN.
Concept tested: VLAN-based Layer 2 network segmentation
Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/17-9/configuration_guide/vlan/b_179_vlan_9300_cg/configuring_vlans.html
Topics
Community Discussion
No community discussion yet for this question.