100-160 Question 69
Select 3A company has implemented a network segmentation strategy by dividing its internal network into separate VLANs, each assigned with unique IP address ranges. How does this strategy improve network security?
- A
It limits the spread of malware or unauthorized access to specific network segments.
- B
It reduces the likelihood of IP address conflicts across devices in the network.
- C
It allows for easier identification and tracking of malicious activities within specific segments.
- D
It ensures that all devices on the network have encrypted communications by default.
- E
It simplifies the enforcement of access control policies between different network segments.
Show answer and explanation
Correct answers: A, C, E
Explanation
Network segmentation, using unique IP address ranges for VLANs, enhances security by limiting the spread of threats, improving the ability to track malicious activity, and simplifying the enforcement of access control policies. It does not, however, inherently prevent IP conflicts or enforce encryption, as these require other mechanisms.
- A. Correct.
Correct: By isolating traffic to specific VLANs, malware or unauthorized access can be contained within one segment, preventing it from spreading across the entire network.
- B. Incorrect.
Incorrect: While segmentation organizes IP addresses, it does not inherently address or prevent IP address conflicts. This is a function of DHCP or static IP management.
- C. Correct.
Correct: Network segmentation helps pinpoint the origin of malicious activities by isolating them to specific address ranges and VLANs, aiding monitoring and response.
- D. Incorrect.
Incorrect: Network segmentation does not inherently enforce encryption for communications. Encryption depends on other protocols like TLS, VPNs, or IPSec.
- E. Correct.
Correct: Segmentation allows administrators to define and enforce granular access controls between segments, improving overall security.