A medical clinic wants to allow guest patients to access the internet via wireless access points while ensuring their traffic is completely isolated from the internal network housing sensitive Electronic Health Record (EHR) systems. Which of the following network design strategies should the security administrator implement on the existing network infrastructure to achieve this isolation?
- Configure VLAN segmentation paired with access control lists to separate guest traffic from internal systemsCevap
- BConnect guest and internal devices to a single flat subnet secured by WPA3 Enterprise authentication
- CRely exclusively on an edge perimeter firewall to inspect all internal traffic moving between wireless hosts
- DDeploy an Intrusion Detection System in passive mode as a compensating control in place of traffic separation
Cevap
Configure VLAN segmentation paired with access control lists to separate guest traffic from internal systems.
The correct response recommends configuring VLAN segmentation along with access control lists. VLANs separate network traffic logically at Layer 2 across shared physical switches and access points, while ACLs explicitly prevent inter-VLAN routing from the guest network to the internal EHR network zone.
Adım Adım Çözüm
Anahtar Kavram
VLAN Segmentation and Traffic Isolation
Tahmini Süre:1m 0s