Which statement best describes how network segmentation supports security and performance?

Which statement best describes how network segmentation supports security and performance?

• A. Segmentation increases broadcast domains to improve performance automatically.
• B. Segmentation uses a single flat network to simplify management.
• C. Segmentation eliminates the need for access controls.
• D. Segmentation limits blast radius, reduces lateral movement, and supports policy enforcement via VLANs and ACLs.

Answer: (D)

Segmenting a network means dividing it into smaller, isolated pieces such as VLANs or subnets. This approach directly supports security and performance in a couple of crucial ways. By keeping traffic within its own segment, the network reduces broadcast domains, which lowers unnecessary traffic and improves performance. More importantly, segmentation confines the potential damage of a breach: if one device is compromised, the attacker’s movement is limited to that segment rather than spreading across the entire network. Traffic that needs to move between segments is forced to pass through defined boundaries where you can apply enforcement points like access control lists and firewalls. VLANs create those logical boundaries, and ACLs enforce who or what can traverse them, enabling precise policy enforcement across the network. That’s why this description best captures how segmentation supports both security and performance. In contrast, increasing broadcast domains, using a flat network, or eliminating access controls would undermine the benefits segmentation provides, since segmentation actually reduces broadcasts, moves away from a flat network, and relies on controls to enforce policies rather than removing them.

Segmenting a network means dividing it into smaller, isolated pieces such as VLANs or subnets. This approach directly supports security and performance in a couple of crucial ways. By keeping traffic within its own segment, the network reduces broadcast domains, which lowers unnecessary traffic and improves performance. More importantly, segmentation confines the potential damage of a breach: if one device is compromised, the attacker’s movement is limited to that segment rather than spreading across the entire network. Traffic that needs to move between segments is forced to pass through defined boundaries where you can apply enforcement points like access control lists and firewalls. VLANs create those logical boundaries, and ACLs enforce who or what can traverse them, enabling precise policy enforcement across the network.

That’s why this description best captures how segmentation supports both security and performance. In contrast, increasing broadcast domains, using a flat network, or eliminating access controls would undermine the benefits segmentation provides, since segmentation actually reduces broadcasts, moves away from a flat network, and relies on controls to enforce policies rather than removing them.