ITPEC FE Morning October 2021 Question 42
Which of the following technologies is the most suitable to divide the whole company network into networks by department?
Explanation
VLAN — it splits one physical switched network into separate logical networks, one per department.
A VLAN groups switch ports (or tagged frames, IEEE 802.1Q) into a logical LAN. Each VLAN is its own broadcast domain, so departments are separated without rewiring, and traffic between them must pass a router or layer 3 switch, where it can be filtered. Moving a person to another department becomes a configuration change.
Answer (c)
Why not others:
- •(a) DMZ — a segment between the internet and the internal network for public servers such as web and mail; it separates outside from inside, not one department from another.
- •(b) NAT — rewrites IP addresses, typically private to public at the internet boundary; it creates no separate networks.
- •(d) VPN — a tunnel that joins remote sites or users to the network over a public one; it connects networks rather than dividing them.
Key rule: Dividing a LAN logically is a VLAN; connecting across the internet is a VPN; hosting public servers is a DMZ; sharing public addresses is NAT.
Networks · AI-written, may contain errors
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official FE past-paper collection or Report an issue.