CyberCertPrepNetwork FundamentalsNetwork DevicesEASYFree question
Scenario
An organization wants to segment its network so that IoT devices, guest users, VoIP phones, and corporate workstations are isolated from each other while using a single physical switch infrastructure.
Which switch feature enables logical separation of these four device types on the same physical switch without requiring four separate physical switches?
- A.STP (Spanning Tree Protocol) instance per device type provides the required logical separation
- B.Port mirroring (SPAN) on each switch port isolates the four device types into separate monitoring streams
- C.VLANs (Virtual Local Area Networks) per IEEE 802.1Q: each device type is assigned to a separate VLAN (e.g., VLAN 10 corporate, VLAN 20 VoIP, VLAN 30 IoT, VLAN 40 guest), which creates separate broadcast domains on one physical switch
- D.MAC-based QoS policies on each port isolate traffic from different device types at Layer 2
Why C is correct
IEEE 802.1Q VLANs create separate Layer 2 broadcast domains on a single physical switch. Each VLAN is a separate network segment; devices in different VLANs cannot communicate without routing through an inter-VLAN router or Layer 3 switch SVI with ACLs. This is the standard solution for multi-tenant isolation on shared switch infrastructure. SPAN, STP, and QoS do not provide network isolation.
Know someone studying for Network Fundamentals? Send them this one.