Examkin

Question

Difficulty: EasySecure Network Design and Segmentation

A medical clinic wants to allow guest patients to access the internet via wireless access points while ensuring their traffic is completely isolated from the internal network housing sensitive Electronic Health Record (EHR) systems. Which of the following network design strategies should the security administrator implement on the existing network infrastructure to achieve this isolation?

  1. Configure VLAN segmentation paired with access control lists to separate guest traffic from internal systemsAnswer
  2. B
    Connect guest and internal devices to a single flat subnet secured by WPA3 Enterprise authentication
  3. C
    Rely exclusively on an edge perimeter firewall to inspect all internal traffic moving between wireless hosts
  4. D
    Deploy an Intrusion Detection System in passive mode as a compensating control in place of traffic separation

Answer

Configure VLAN segmentation paired with access control lists to separate guest traffic from internal systems.
The correct response recommends configuring VLAN segmentation along with access control lists. VLANs separate network traffic logically at Layer 2 across shared physical switches and access points, while ACLs explicitly prevent inter-VLAN routing from the guest network to the internal EHR network zone.

Step-by-Step Solution

1
Identify the primary requirement
The requirement is to isolate guest Wi-Fi users from internal medical records on shared physical infrastructure.
Preventing unauthorized access to sensitive internal assets requires logical boundary separation at the network layer.
2
Evaluate network isolation controls
VLANs create separate broadcast domains, and ACLs enforce traffic boundaries between those domains.
VLAN tagging logically partitions physical switches and access points so guest traffic cannot reach internal IP ranges.

Key Concept

VLAN Segmentation and Traffic Isolation
Estimated Time:1m 0s
Rate this question

Topics

Secure Network Design and Segmentation

More questions from this topic