3.1 Identify and Describe Network Segmentation Methods (e.g., IP Subnetting, VLAN, Zone) CYBERSECURITY-APPRENTICE Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   In the context of network segmentation, what is the role of IP subnetting?

   • AIt creates separate broadcast domains at Layer 3
   • BIt isolates traffic at the data link layer
   • CIt automatically applies security policies to hosts
   • DIt provides encryption for inter-subnet traffic
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A network administrator is asked to reduce the risk of a compromised workstation reaching other workstations in the same office. The office currently uses a single /24 subnet and a single VLAN. Which change would be most effective?

   • AKeep the single VLAN but add more IP addresses.
   • BDivide the /24 into smaller subnets and create corresponding VLANs for each subnet.
   • CChange the subnet mask to /16 to allow more hosts.
   • DImplement security zones but keep the same subnet and VLAN.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A network administrator needs to divide a network into subnets to isolate different departments. They have been given the 192.168.1.0/24 network and need at least 5 subnets. What is the smallest subnet mask that will provide at least 5 subnets?

   • A/28
   • B/25
   • C/27
   • D/26
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A network architect is designing a new data center. The requirements are: (1) isolate traffic between different application tiers, (2) allow the web tier to be reached from the internet, and (3) ensure that the database tier is not accessible from the internet. Which combination of segmentation methods best meets these requirements?

   • AUse VLANs to separate tiers, assign different subnets to each VLAN, and place the web tier in a 'web' zone and the database tier in a 'database' zone with firewall rules blocking internet access to the database zone.
   • BUse a single VLAN for all tiers and rely on IP subnetting to isolate traffic.
   • CUse security zones only, without VLANs or subnets.
   • DUse IP subnetting only, with no VLANs or zones.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A network administrator wants to reduce the risk of a compromised device on the network being able to scan other devices. The network currently has a single VLAN. What is the most effective change?

   • ACreate multiple VLANs to isolate groups of devices from each other.
   • BIncrease the number of switches in the network.
   • CImplement security zones on the firewall.
   • DAssign different IP subnets to groups of devices without changing the VLAN configuration.
   Reveal Solution Discussion Select an answer first