Question

During a security assessment, an organization is advised of inadequate control over network segmentation. The assessor explains that the organization's reliance on VLANs to segment traffic is insufficient to provide segmentation based on regulatory standards.

Which of the following should the organization consider implementing along with VLANs to provide a greater level of segmentation?

A. Air gaps
B. Access control lists
C. Spanning tree protocol
D. Network virtualization
E. Elastic load balancing

Answer 1

The organization should consider implementing network virtualization along with VLANs to provide a greater level of segmentation.

Step-by-step explanation:

The organization should consider implementing network virtualization along with VLANs to provide a greater level of segmentation.

Network virtualization allows for the creation of multiple virtual networks within a physical network infrastructure, enabling further separation of traffic and resources. This can help meet regulatory standards for network segmentation.

For example, the organization could use virtual local area networks (VLANs) to segregate traffic based on logical grouping, while network virtualization technology, such as virtual network overlays or software-defined networking (SDN), can provide more granular control and isolation of network traffic.