350-401 Question 105
Single answerA network engineer is tasked with segmenting a single physical network into multiple virtual networks to securely isolate traffic between different departments. Which network virtualization technology should the engineer use?
- A
Virtual LANs (VLANs)
- B
Virtual Extensible LANs (VXLANs)
- C
Software-Defined Networking (SDN)
- D
Virtual Private Network (VPN)
Show answer and explanation
Correct answer: A
Explanation
The correct answer is VLANs because they allow a single physical network to be divided into multiple logical networks, ensuring traffic isolation between departments. This is a fundamental concept in network virtualization and is widely used for segmenting traffic in enterprise environments.
- A. Correct.
VLANs are used to segment a physical network into multiple logical networks, providing traffic isolation and improving security and efficiency. This is the correct choice for segmenting traffic between departments.
- B. Incorrect.
VXLANs are used to extend Layer 2 networks over Layer 3 infrastructure, typically in data centers. While VXLANs are a virtualization technology, they are not the primary solution for department-level segmentation on a single physical network.
- C. Incorrect.
SDN focuses on decoupling the control plane from the data plane in a network to improve programmability and flexibility. While related to network virtualization, it is not directly used for traffic segmentation in this scenario.
- D. Incorrect.
VPNs are used to securely connect remote sites or users over an untrusted network, such as the internet. They do not address traffic segmentation within a single physical network.