According to company policy an administrator must logically keep the Human Resources department separated from the Accounting department. Which of the following would be the simplest way to…

The correct answer is D. VLAN. A VLAN (Virtual Local Area Network) allows a network administrator to logically segment a physical network into separate broadcast domains without requiring additional physical hardware. By placing HR and Accounting on separate VLANs, traffic between them is isolated at Layer…

Security architecture

Question

According to company policy an administrator must logically keep the Human Resources department separated from the Accounting department. Which of the following would be the simplest way to accomplish this?

Options

ANIDS
BDMZ
CNAT
DVLAN

How the community answered

(24 responses)

A
4% (1)
B
4% (1)
D
92% (22)

Explanation

A VLAN (Virtual Local Area Network) allows a network administrator to logically segment a physical network into separate broadcast domains without requiring additional physical hardware. By placing HR and Accounting on separate VLANs, traffic between them is isolated at Layer 2, meaning devices on one VLAN cannot communicate with devices on another without going through a router or Layer 3 switch with ACLs. This is the simplest and most cost-effective solution for logical department separation. The other options do not address logical segmentation: NIDS monitors for intrusions, DMZ is for isolating public-facing services, and NAT translates IP addresses but does not segment internal departments.

Topics

#VLAN#network segmentation#logical separation

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice