Cisco Cyber Security Practice Exam

What technology would you use to segment a computer network for better performance and security?

1. Virtual Private Network (VPN)

2. VLAN

3. Network Access Control (NAC)

4. Firewall

The correct answer is: VLAN

Using VLAN technology is an effective approach to segment a computer network, enhancing both performance and security. A Virtual Local Area Network (VLAN) allows for the logical segmentation of a network at the data link layer (Layer 2) of the OSI model. By creating VLANs, network administrators can group together devices with similar requirements or functions, regardless of their physical location. This segmentation facilitates improved performance since broadcast traffic is restricted to individual VLANs; therefore, it reduces network congestion and enhances overall efficiency. On the security front, VLANs enable better control over communications between devices. By segmenting different departments or types of traffic (such as separating user data from sensitive information), it becomes more difficult for unauthorized users to access critical resources. While other technologies like Virtual Private Networks (VPNs) help secure remote connections, Network Access Control (NAC) focuses on enforcing security policies for devices trying to access the network, and firewalls serve to protect against external threats. However, they do not inherently provide the same level of network segmentation that VLANs offer for improving performance and enhancing security within the network itself.