3.1 Identify and Describe Network Segmentation Methods (e.g., IP Subnetting, VLAN, Zone) CYBERSECURITY-APPRENTICE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   How does a VLAN isolate broadcast domains?

   • ABy encrypting broadcast frames before transmission
   • BBy assigning different IP subnets to each VLAN
   • CBy using a firewall to filter broadcast traffic
   • DBy preventing broadcast frames from crossing VLAN boundaries
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A company has a firewall with three interfaces: one connected to the internet, one to a DMZ, and one to the internal network. They want to allow web servers in the DMZ to be accessed from the internet, but they also want to prevent the DMZ from initiating connections to the internal network. What is the best way to configure this?

   • AUse VLANs to separate the DMZ and internal network, but do not configure zones.
   • BCreate a single security zone for the DMZ and internal network and rely on the firewall's default rules.
   • CPut all interfaces in the same zone and use IP subnetting to differentiate traffic.
   • DAssign each interface to a different security zone (untrust, dmz, trust) and create firewall rules that allow internet-to-DMZ traffic but block DMZ-to-internal traffic.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A network administrator needs to divide a /24 network into four equal-sized subnets for four different departments. What subnet mask should be used for each subnet?

   • A/25
   • B/26
   • C/27
   • D/28
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A network engineer wants to reduce broadcast traffic on a large office network. Which method will directly reduce the size of broadcast domains?

   • ACreate additional VLANs and assign users to them based on function.
   • BImplement security zones on the firewall.
   • CAssign different IP subnets to groups of users without changing the switch configuration.
   • DIncrease the number of switches in the network.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company wants to allow the marketing department to access the internet but block access to the HR system. The network is already segmented into VLANs and subnets. What should the administrator configure to enforce this policy?

   • AUse a single security zone for all internal users.
   • BCreate a security zone for marketing and a different zone for HR, then apply firewall rules between them.
   • CPlace marketing and HR in the same VLAN but different subnets.
   • DChange the subnet mask of the marketing VLAN to block access to HR.
   Reveal Solution Discussion Select an answer first