Question

Difficulty: HardNetwork Hardware Devices

A network technician is setting up an expansion wing in a corporate facility. The new wing contains two distinct department subnets that require network isolation from each other for security, yet both subnets must communicate with central database servers located on a third subnet. Additionally, the installation requires traffic filtering between subnets using IP-based rules, but physical rack space is strictly limited to a single network device inside the wiring closet. Which of the following network hardware devices should the technician deploy to meet all requirements?

  1. Managed Layer 3 switchAnswer
  2. B
    Unmanaged Layer 2 switch
  3. C
    Dedicated DNS server host
  4. D
    Passive copper patch panel

Answer

A managed Layer 3 switch should be deployed because it combines VLAN isolation at Layer 2 and inter-VLAN routing/filtering at Layer 3 within a single physical footprint.
A managed Layer 3 switch combines traditional high-speed Layer 2 switching with Layer 3 IP routing features. It can maintain separate VLANs for internal department isolation, perform inter-VLAN routing to reach the external database subnet, and apply Access Control Lists (ACLs) for IP filtering, all while occupying a single device slot in the equipment rack.

Step-by-Step Solution

1
Analyze the technical requirements presented in the scenario.
Requirements identified: departmental subnet isolation (VLANs), inter-VLAN routing to a third database subnet, IP-based packet filtering, and a single hardware chassis limitation.
Connecting multiple subnets while isolating broadcast domains requires Layer 3 routing functionality combined with Layer 2 switching.
2
Evaluate hardware capabilities against the physical rack limitation.
A managed Layer 3 switch supports both Layer 2 VLAN tagging and Layer 3 IP routing/access control lists (ACLs) within one physical device.
Traditional solutions using a separate Layer 2 switch and Layer 3 router would require two distinct physical devices, violating the single-device rack limitation.
3
Verify why alternative options fail the requirements.
Unmanaged switches lack routing and management interfaces; DNS servers handle name resolution only; patch panels provide no active logic.
Only a Layer 3 managed switch satisfies both the functional networking criteria and the physical space constraint.

Key Concept

Layer 3 Managed Switch Functionality and Inter-VLAN Routing
Estimated Time:1m 30s
Rate this question