Examkin

Question

Difficulty: EasySecure Network Design and Segmentation

Match each network segmentation concept on the left with its defining implementation characteristics on the right. Which pairings correctly connect each segmentation technique to its primary description?

  • Air GapComplete physical isolation of a network segment with no electronic connectivity to external systems.
  • Demilitarized Zone (DMZ)A perimeter subnetwork positioned between internal private resources and untrusted public networks to host external services.
  • VLAN (Virtual LAN)Logical segmentation at Layer 2 of the OSI model used to partition broadcast domains within shared physical switch infrastructure.
  • MicrosegmentationGranular, software-defined isolation applied at the workload or application level to restrict lateral East-West traffic.

Answer

Air Gap matches physical isolation with zero electronic connectivity. Demilitarized Zone (DMZ) matches a perimeter network hosting public services. VLAN matches Layer 2 switch broadcast domain separation. Microsegmentation matches granular workload isolation controlling East-West traffic.
The concepts correctly align with their respective architectural boundaries: Air Gap provides absolute physical disconnection, DMZ insulates internal networks from public service exposure, VLAN separates Layer 2 switch traffic, and Microsegmentation limits lateral movement between virtual workloads.

Step-by-Step Solution

1
Identify the physical versus logical nature of each network segmentation technique.
Air gap is entirely physical, DMZ is perimeter-focused, VLAN operates at Layer 2, and microsegmentation enforces workload-level policies.
Different network architecture goals require distinct physical or logical boundary boundaries.
2
Pair physical separation and perimeter protection terms.
Air Gap connects to complete physical isolation. DMZ connects to the subnetwork hosting public-facing services.
Air gaps ensure no physical or electronic link exists, whereas DMZs allow controlled external access.
3
Pair switch-level and workload-level logical controls.
VLAN connects to Layer 2 broadcast domain partitioning. Microsegmentation connects to granular workload isolation for East-West traffic.
VLANs segment network hardware at the data link layer, while microsegmentation controls traffic flow between virtualized application instances.

Key Concept

Network Segmentation and Boundary Controls
Rate this question

Topics

Secure Network Design and Segmentation

More questions from this topic