mediumMultiple SelectObjective-mapped
ISC2 CC Practice Question: Which TWO technologies provide network…
Which TWO technologies provide network segmentation? (Choose two.)
⚠ Common exam trap
ISC2 often tests the misconception that switches inherently segment networks, but without VLANs, a standard switch creates a single broadcast domain; the trap is that candidates confuse switching (forwarding) with segmentation (isolation).
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Routers with ACLs
Routers with ACLs (Access Control Lists) provide network segmentation by filtering traffic based on Layer 3 (IP addresses) and Layer 4 (port numbers) criteria, effectively dividing a network into separate security zones or subnets. VLANs (Virtual Local Area Networks) segment a network at Layer 2 by logically grouping devices into separate broadcast domains, even if they share the same physical switch. Both technologies isolate traffic to enforce security policies and reduce attack surfaces.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Firewalls
Why it's wrong here
Firewalls enforce security policies but are not the primary means of network segmentation.
- ✗
Hubs
Why it's wrong here
Hubs operate at Layer 1 and do not segment the network.
- ✓
Routers with ACLs
Why this is correct
Routers can segment networks based on IP addresses and ACLs.
- ✗
Switches
Why it's wrong here
Switches segment collision domains but not broadcast domains.
- ✓
VLANs
Why this is correct
VLANs create separate broadcast domains on a switch.
Visual reference
Go deeper
Related to this question
Learn chapter
Introduction to Security Principles
Key term
Network segmentation
Network segmentation is the practice of dividing a computer network into smaller, isolated parts to improve performance, contain security threats, and simplify management.
Key term
Access control
Access control is the security practice of determining who or what is allowed to view, use, or enter a resource, and under what conditions.
About these practice questions
Courseiva writes every CC question from scratch — 976 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.