Q27Security Design
A customer has a functional requirement stating that HR systems in a data center must be segmented from other systems located in the same data center and VLAN. The systems run legacy applications using hard-coded IP addresses, with all HR systems assigned .129 through .254 in the 10.20.20.0/24 prefix. Which segmentation method is optimal for the customer?
← → navigate · a answer
Community votes
Discussion · 5
C 5
Selected Answer: C
VLAN (Virtual LAN) is a concept where we split the broadcast domain into smaller broadcast domains logically at layer 2. If we create separate VLANs then by default, a host from one VLAN can communicate with all the hosts in the same VLAN. If we want some hosts to not be able to reach other hosts within the same VLAN, then the concept of VLAN Access-list or Private VLAN can be used.
B 2
Selected Answer: B
B should be the ans
C 2
Selected Answer: C
VACL is meant exactly for this
1
why B, how will it segment within the VLAN?
B 1
Selected Answer: B
The HR system are dedicated to .129 to .254 which can be further split into /25 prefix. The question asks which segmentation method is optimal for the customer - not asking to keep the HR systems in the current VLAN with other hosts.