mediumMultiple SelectObjective-mapped
ISC2 CC Practice Question: A security administrator is reviewing network…
A security administrator is reviewing network security controls. Which TWO of the following are examples of network segmentation technologies? (Select TWO)
⚠ Common exam trap
ISC2 often tests the distinction between technologies that create segmentation (subnetting, VLANs) and technologies that enforce security policies between segments (firewalls, ACLs), leading candidates to mistakenly select firewalls as a segmentation technology.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Subnetting
Subnetting divides a larger network into smaller, logical subnetworks by manipulating the subnet mask (e.g., using VLSM or CIDR). This creates separate broadcast domains at Layer 3, allowing administrators to isolate traffic and apply distinct security policies between subnets, which is a core function of network segmentation.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Proxy servers
Why it's wrong here
Proxy servers mediate traffic but are not segmentation technology.
- ✗
Honeypots
Why it's wrong here
Honeypots are decoy systems, not segmentation technology.
- ✓
Subnetting
Why this is correct
Subnetting divides a network into smaller IP subnetworks, providing Layer 3 segmentation.
- ✓
VLANs
Why this is correct
VLANs create separate broadcast domains, segmenting the network at Layer 2.
- ✗
Firewalls
Why it's wrong here
Firewalls filter traffic but do not segment the network; they control access between segments.
Visual reference
Go deeper
Related to this question
Learn chapter
Introduction to Security Principles
Key term
Denial-of-service
A Denial-of-service (DoS) attack is an attempt to make a computer, network, or online service unavailable to its intended users by overwhelming it with fake traffic or requests.
Key term
Subnet
A subnet is a logical subdivision of an IP network, created by partitioning a larger network address space using subnet masks.
About these practice questions
This CC question is part of Courseiva's 976-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.