A technician is setting up a small office network with a single internet connection from a cable modem. The office has two departments: Accounting and Sales. The technician needs to ensure that devices in Accounting cannot communicate with devices in Sales, but both departments must be able to access the internet. Which feature should the technician configure on the managed switch to meet this requirement?

Enable DHCP on the router

DHCP dynamically assigns IP addresses but does not prevent communication between devices on the same subnet.

Set up port forwarding on the router

Port forwarding is used to redirect external requests to internal services, not to isolate internal traffic.

Configure NAT on the router

NAT translates private IP addresses to a public address for internet access; it does not provide traffic isolation between departments.

What does this 220-1101 question test?

Access ports place end devices into a single VLAN.

What is the correct answer to this question?

The correct answer is: Configure VLANs on the managed switch — Virtual LANs (VLANs) allow a switch to create separate broadcast domains, isolating traffic between different groups while sharing the same physical infrastructure. By assigning ports on the switch to different VLANs (e.g., VLAN 10 for Accounting, VLAN 20 for Sales), devices in one department will not be able to communicate directly with the other. The router (or a Layer 3 switch) can then route traffic from both VLANs to the internet, while preventing inter-VLAN communication if no route is added. DHCP and NAT are unrelated to traffic isolation. Port forwarding is used to allow external access to internal services.

What should I do if I get this 220-1101 question wrong?

Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.