A company puts IoT cameras on their own subnet. What is the main security benefit?

If the IoT subnet is attacked, other subnets are less likely to be affected

Cameras will automatically encrypt all network traffic

IoT devices will no longer need passwords

The network will no longer need routing

A network has no segmentation (one flat subnet). What is a likely risk if an adversary gets inside?

An attack can spread more easily to many devices because traffic is not isolated

The network cannot use IP addresses

Wireless encryption cannot be enabled

Users cannot connect to printers

Which situation shows segmentation preventing an attack from impacting other devices?

A compromised student device cannot reach the staff server subnet because it is separated

A compromised student device is allowed to scan all internal servers

A compromised student device becomes the DNS server for the whole network

A compromised student device can access all shared drives

A hospital places medical devices on their own subnet and restricts connections to that subnet. Which benefit of segmentation does this support?

Reducing the chance that an attack elsewhere impacts critical devices

Making wireless networks faster by disabling encryption

Ensuring every device shares the same password

Allowing all traffic to flow freely between devices

A company applies stricter firewall rules to the finance subnet than to the guest subnet. Which benefit of segmentation does this demonstrate?

Different security policies and controls can be applied to different segments

All segments must always use the same security rules

Segmentation removes the need for any firewall

Segmentation prevents natural disasters

A network is designed with a high-security zone for servers and a lower-security zone for guests. What makes this possible?

Network segmentation that supports different security zones

Using the same subnet mask everywhere

Turning off logging to reduce alerts

Why might an organization place sensitive databases in a separate network segment?

To apply stronger controls to that segment and reduce exposure from less secure zones

To make the database publicly accessible from the internet

To avoid using IP addresses for the database

To eliminate the need for authentication

Which choice best matches a ‐higher security zone‐ in a segmented network?

A segment with stricter access controls and limited allowed connections

A segment that allows all inbound and outbound traffic

A segment with the weakest Wi-Fi encryption for convenience

A segment that disables monitoring to improve performance

A school blocks student devices from accessing the gradebook server subnet but allows staff devices. Which benefit of segmentation is being used?

Applying different access controls to different segments based on user needs

Replacing encryption with MAC addresses

Preventing DNS from working on the network

Making all devices share one account

Which security control is most directly enabled by segmentation?

Creating separate zones where different rules can be enforced

Automatically removing malware from infected devices

Guaranteeing that Wi-Fi signals do not leak outside a building

Preventing users from reusing passwords

A business has a public-facing web server and an internal payroll server. What is a key benefit of placing them in different segments?

A compromise of the public server is less likely to impact the payroll server because traffic is isolated

It removes the need for backups

It guarantees the web server cannot be attacked

It forces both servers to use the same firewall rules

An organization segments by department and sets different firewall rules for each. What benefit does this provide beyond isolation?

It allows security controls to match the needs and sensitivity of each department

It prevents all phishing emails from being delivered

It eliminates the need for user authentication

It automatically blocks all wireless interference

Which statement would you include in a report to describe network segmentation to a non-technical manager?

Segmentation splits the network into smaller parts so traffic and access can be controlled more safely

Segmentation means turning off the internet during emergencies

Segmentation is the same as using longer passwords

Segmentation is a type of antivirus software

A company’s guest Wi-Fi is segmented from the internal network. What risk is most directly reduced?

Guests gaining access to internal devices and data if a guest device is compromised

Employees forgetting their passwords

A network uses a separate segment for development systems that are less secure. What benefit does this provide?

Testing systems can be kept in a lower-security zone without exposing more sensitive production systems

It makes all production systems public on the internet

It removes the need for monitoring suspicious traffic

It guarantees developers cannot make mistakes

Why can segmentation improve incident response after an attack?

It helps defenders limit the affected area by isolating where traffic and devices are impacted

It makes all logs disappear so alerts stop

It prevents the need to patch systems

It ensures all devices share one IP address

Which example best shows segmentation supporting both higher and lower security zones?

A server segment allows only required ports, while a guest segment is limited to internet-only access

Every device can access every other device

All segments use the exact same rules and permissions

Guests are given admin accounts for convenience

If a student asks, “Is segmentation the same as a firewall?” what is the best description?

Segmentation divides the network into subnets; firewalls control traffic between those subnets and other networks

Yes, segmentation and firewalls are identical tools

No, segmentation is only for passwords, not networks

No, firewalls only apply to physical doors

A company wants to keep a malware outbreak from spreading. Which benefit of segmentation supports this goal?

Isolating traffic so attacks on one subnet are less likely to impact other subnets

Making all devices use the same shared drive

Disabling authentication to reduce login delays

Broadcasting Wi-Fi beacons farther for better coverage

A bank creates a separate segment for ATMs and applies extra monitoring rules there. Which benefit of segmentation is being used?

Different controls can be applied to segments based on sensitivity and purpose

ATMs no longer require IP addresses

Monitoring is not needed if a segment exists

Encryption becomes unnecessary when segmented

Which benefit best explains why segmentation is often used alongside risk-based security policies?

It supports setting stronger protections where risk and sensitivity are higher

It guarantees that all risks are eliminated

It replaces the need for employee training

It makes wireless networks immune to jamming

A company separates payroll servers into their own subnet. Which benefit is most directly related to confidentiality?

Fewer devices can reach the payroll servers, reducing exposure of sensitive data

More devices can reach the payroll servers, increasing convenience

Users no longer need multi-factor authentication

The subnet mask becomes optional

In a segmented network, why might broadcast traffic be easier to manage?

Traffic is isolated within subnets instead of being shared across the entire network

Broadcasts are always blocked by default on every switch

Broadcast traffic becomes encrypted automatically

Broadcast traffic can only happen on the internet

A university creates separate segments for research data and student Wi-Fi. What benefit does this provide for policy enforcement?

Different security rules can be enforced for each segment to match different requirements

Both segments must follow the same rules to keep things fair

Policies are unnecessary when networks are segmented

Segmentation prevents users from needing logins

Which statement best summarizes the overall benefit of network segmentation?

It reduces the impact of attacks and supports applying the right controls to the right parts of the network

It guarantees that no device will ever be compromised

It replaces the need for firewalls, encryption, and monitoring

It only improves internet speed and does not affect security

A company hosts a public website but wants to keep its internal employee database safer. Which segmentation technique best explains placing the web server in a screened subnet (DMZ)?

A DMZ separates public-facing systems from the internal network, reducing risk if the public server is attacked

A DMZ encrypts the database so it can be safely accessed from anywhere

A DMZ blocks all internet traffic so the website cannot be reached

A DMZ removes the need for firewall rules

Why is a screened subnet (DMZ) usually considered a lower security zone than an internal network?

It must allow more access from external networks to support public services, so it is more exposed

It contains only encrypted traffic, so it needs fewer protections

It is physically located outside the building and cannot be monitored

It is used only for backups and has no active services

Which resource is MOST appropriate to place in a DMZ?

A public web server that must be reachable from the internet

A payroll database containing employee Social Security numbers

A domain controller used to manage internal logins

How do firewall zones and rules support the security purpose of a DMZ?

They control which traffic can enter the DMZ and restrict what the DMZ can access internally

They automatically patch public servers in the DMZ

They prevent any traffic from reaching the DMZ

They replace the need for authentication on internal systems

A school wants a public-facing parent portal server but does not want that server to directly access student records systems. Which design best supports this goal?

Place the portal server in a DMZ and tightly limit DMZ-to-internal traffic with firewall rules

Place the portal server on the same internal subnet as student records

Disable firewalls so traffic flows freely between systems

Use only MAC filtering on switches to protect records

A company uses VLANs to separate guest devices from employee devices on the same switch. How does this increase security?

It logically separates traffic so guest devices have limited ability to reach internal devices

It changes guest MAC addresses every hour to prevent tracking

It forces all devices to use the same encryption key

It prevents the switch from learning any MAC addresses

Why must traffic between two VLANs pass through a layer 3 or routing-capable device?

VLANs are separate logical LANs, so routing is needed to move traffic between them

VLANs are encrypted networks and must be decrypted by a router

VLANs only work over wireless connections

VLANs cannot carry IP traffic without a hub

Which scenario shows VLANs improving both security and management?

Putting IoT devices in one VLAN and office computers in another to limit interaction

Putting all devices in one VLAN to simplify addressing

Using a DMZ for internal printers

Disabling switch port security to reduce troubleshooting time

A hospital wants to keep guest Wi-Fi users from reaching medical devices, but both must connect to the same switch. Which technique is best?

Create separate VLANs and restrict inter-VLAN routing with rules

Disable beacon frames on the access point

Use only a stronger password on guest Wi-Fi

How do VLANs help reduce the impact of a compromised device?

They can limit which devices the compromised device can communicate with by keeping it in a separate logical segment

They automatically detect malware on the compromised device

They prevent phishing emails from being delivered to users

They guarantee the device cannot connect to the network

A switch is attacked with MAC flooding. Which segmentation-related security feature can reduce this risk?

Port security that limits the number of MAC addresses allowed on a switch port

A DMZ that hosts public services

A stronger Wi-Fi encryption standard

How does port security help prevent MAC flooding from impacting the switch’s CAM table?

It limits how many MAC addresses can be learned on a port, reducing the chance of overflowing the CAM table

It encrypts MAC addresses before storing them in the CAM table

It disables all ports when the switch boots

It forces all devices to use the same MAC address

A network admin sets port security so a port only allows 2 MAC addresses. Why is this useful?

It helps block unauthorized devices and reduces the chance of MAC flooding on that port

It guarantees that the device on the port cannot be infected with malware

It makes the port faster because fewer devices are connected

It allows anyone to connect as long as they use Wi-Fi

Which sign would MOST likely suggest port security is needed on an access switch?

Unknown devices frequently plugging into open wall ports

Users forgetting their passwords

A database running out of storage space

How is port security related to network segmentation goals?

It controls access at the edge of a segment by limiting which devices can connect through a switch port

It creates a DMZ for public servers

It replaces the need for VLANs and subnets

It encrypts all traffic between subnets

An organization creates separate subnets for finance and marketing. How does subnetting increase security?

If one subnet is compromised, the breach can be contained to reduce exposed devices

Subnetting automatically blocks all traffic between departments

Subnetting replaces the need for firewalls and rules

Subnetting encrypts all packets by default

Why must traffic from one subnet to another go through a layer 3 device?

Different subnets require routing to move packets between networks

Different subnets use different MAC address formats

Subnets only work on fiber optic cables

Subnets are only used for wireless networks

A company’s printers are placed in their own subnet. What security benefit does this provide?

It limits which devices can access printers and reduces the spread of attacks to other subnets

It makes printers immune to power outages

It forces printers to use WPA3 encryption

It prevents printers from needing IP addresses

How does subnetting support applying different security rules to different parts of a network?

Security controls can be set per subnet, and routing between subnets can be restricted

Subnetting disables all firewall filtering automatically

Subnetting allows anyone to reach any device without checks

Subnetting ensures all devices have public IP addresses

AP Cybersecurity 3.4 A-B

Authored by Cliff Borden

Computers

University

2 covered

Used 1+ times

AI Actions

Add similar questions

Adjust reading levels

Convert to real-world scenario

Translate activity

More...

Content View

Student View

62 questions

Show all answers

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

A network administrator says they are “segmenting the network.” What does network segmentation mean?

Dividing a network into smaller, isolated segments or subnetworks

Encrypting every file stored on the network

Replacing all switches with hubs

Turning off wireless access points

Tags

2.A

3.4.A

3.4.A.1

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

A company creates separate subnets for HR, finance, and guests. This is an example of which security control?

Network segmentation

Password rotation

Phishing awareness training

Full disk encryption

Tags

2.A

3.4.A

3.4.A.1

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Which option best describes a “segment” in a segmented network?

A smaller subnetwork that is separated from other parts of the network

A single user account with admin rights

A type of malware used to scan ports

A wireless encryption protocol

Tags

2.A

3.4.A

3.4.A.1

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

A school divides its network into separate subnets for students and staff. Why is this still considered segmentation even though both groups use the same building?

Segmentation is based on logical separation into subnetworks, not just physical location

Segmentation only applies when networks are in different cities

Segmentation only applies to the internet, not internal networks

Segmentation requires new computers for each user group

Tags

2.A

3.4.A

3.4.A.1

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Which diagram change most clearly shows network segmentation?

Adding separate labeled subnets with controlled connections between them

Adding more Wi-Fi access points with the same SSID

Changing all IP addresses to public addresses

Removing routers so devices communicate directly

Tags

2.A

3.4.A

3.4.A.1

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

A ransomware infection hits one computer in the guest network. Which benefit of segmentation can limit the damage?

Isolating network traffic so an attack on one subnet is less likely to impact other subnets

Making passwords longer for all users

Increasing Wi-Fi signal strength

Turning off all firewall rules

Tags

2.A

3.4.A

3.4.A.2

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Why can segmentation help stop an attacker from moving laterally after compromising one device?

It separates traffic into subnets, making it harder for an attacker in one subnet to reach devices in other subnets

It automatically patches all devices on the network

It prevents users from clicking phishing links

It makes MAC addresses change every hour

Tags

2.A

3.4.A

3.4.A.2

Access all questions and much more by creating a free account

Create resources

Host any resource

Get auto-graded reports

Continue with Google

Continue with Email

Continue with Classlink

Continue with Clever

or continue with

Microsoft

Apple

Others

Already have an account?

Popular Resources on Wayground

15 questions

Grade 3 Simulation Assessment 1

Quiz

•

3rd Grade

22 questions

HCS Grade 4 Simulation Assessment_1 2526sy

Quiz

•

4th Grade

16 questions

Grade 3 Simulation Assessment 2

Quiz

•

3rd Grade

19 questions

HCS Grade 5 Simulation Assessment_1 2526sy

Quiz

•

5th Grade

17 questions

HCS Grade 4 Simulation Assessment_2 2526sy

Quiz

•

4th Grade

20 questions

Equivalent Fractions

Quiz

•

3rd Grade

24 questions

HCS Grade 5 Simulation Assessment_2 2526sy

Quiz

•

5th Grade

20 questions

Math Review

Quiz

•

3rd Grade

Discover more resources for Computers

36 questions

8th Grade US History STAAR Review

Quiz

•

KG - University

25 questions

Spanish future tense

Quiz

•

10th Grade - University

55 questions

Post Malone Addtion (Tres)

Quiz

•

12th Grade - University

15 questions

Quotation Marks vs. Italics for MLA

Quiz

•

9th Grade - University

20 questions

Disney Trivia

Quiz

•

University

50 questions

AP Biology Exam Review 2017

Quiz

•

11th Grade - University

215 questions

8th Physical Science GA Milestones Review

Quiz

•

KG - University

20 questions

Ch15_review_TEACHER

Quiz

•

University