Which activity is most effective for verifying that segmentation is working as intended?

Reviewing the network diagram once a year

Conducting penetration tests and traffic flow analysis

Counting the number of VLANs configured

Checking the firmware version of switches

A cloud service provider wants to isolate each customer's virtual machines (VMs) from each other while allowing the VMs within the same customer to communicate freely. The provider uses a virtualized network infrastructure. Which segmentation approach is most appropriate?

Logical segmentation using VLANs, with a unique VLAN per customer.

Micro-segmentation using software-defined networking (SDN) policies that enforce per-customer and per-VM rules.

Physical segmentation with a separate physical switch per customer.

Using a single flat network and rely on host-based firewalls on each VM.

After implementing a new segmentation policy that restricts traffic between the HR and finance VLANs, a security analyst needs to verify that the policy is working as intended. Which action should the analyst take?

Review the firewall logs for denied traffic between the two VLANs.

Use a packet capture on a host in the HR VLAN to confirm that no traffic is sent to the finance VLAN.

Check the routing table on the firewall to confirm that the VLANs are not directly connected.

Run a network scan from a host in the HR VLAN to the finance VLAN and confirm that the scan is blocked.

Which of the following is a common method to enforce segmentation between VLANs?

Using a hub instead of a switch

Using a router or Layer 3 switch with ACLs

Disabling spanning tree protocol

Configuring all ports in access mode

What is the role of firewall rules in enforcing network segmentation?

To encrypt all traffic within a segment

To assign IP addresses to devices in different segments

To filter traffic between segments based on security policy

CiscoCertified Network Professional Cybersecurity (CBRCOR)

Domain 2Objective 8

2.8 Apply Segmentation to a Network 350-201 Practice Questions (Page 4)

Part of the Techniques domain, which accounts for 30% of the 350-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~15–24 in this domain), expect 1–1 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

5concepts

30%of the exam

Questions 16–20

16foundation · easy
Which activity is most effective for verifying that segmentation is working as intended?
Select an answer first
17application · medium
A cloud service provider wants to isolate each customer's virtual machines (VMs) from each other while allowing the VMs within the same customer to communicate freely. The provider uses a virtualized network infrastructure. Which segmentation approach is most appropriate?
Select an answer first
18application · medium
After implementing a new segmentation policy that restricts traffic between the HR and finance VLANs, a security analyst needs to verify that the policy is working as intended. Which action should the analyst take?
Select an answer first
19foundation · easy
Which of the following is a common method to enforce segmentation between VLANs?
Select an answer first
20foundation · easy
What is the role of firewall rules in enforcing network segmentation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-201” is a trademark of its owner, used for identification only.