easyMultiple SelectObjective-mapped
CISSP Practice Question: Which TWO of the following are valid reasons to…
Which TWO of the following are valid reasons to implement network segmentation?
⚠ Common exam trap
Test-takers frequently confuse network segmentation with performance optimization techniques like load balancing or redundancy, leading them to incorrectly select options that address latency or fault tolerance rather than the primary security and broadcast containment benefits.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
To isolate sensitive data and systems from the rest of the network.
Network segmentation isolates sensitive data and systems by creating separate broadcast domains or VLANs, restricting unauthorized access and lateral movement. This is a core security principle for protecting critical assets, as it limits the attack surface and enforces access controls between segments.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
To isolate sensitive data and systems from the rest of the network.
Why this is correct
Network segmentation is a critical security control that logically separates different parts of a network. By creating distinct segments for sensitive data and systems, organizations can significantly limit the exposure of critical assets to unauthorized access or malicious activity. This isolation restricts lateral movement for attackers, ensuring that a compromise in one segment does not automatically grant access to highly protected resources in another.
- ✗
To eliminate single points of failure.
Why it's wrong here
Implementing network segmentation does not inherently eliminate single points of failure (SPOF); rather, it focuses on logical separation and access control. SPOFs are addressed through redundancy mechanisms, such as deploying redundant hardware, power supplies, network links, or using load balancing and failover clusters. While segmentation can improve resilience by containing failures, it does not directly provide the physical or logical duplication necessary to remove a SPOF.
- ✓
To contain broadcast traffic and improve performance.
Why this is correct
Network segmentation, often achieved through VLANs or subnets, effectively contains broadcast traffic within smaller, defined broadcast domains. When a network is segmented, broadcasts originating in one segment do not propagate to other segments, thereby reducing network congestion and improving overall network performance. This containment minimizes the processing overhead on devices outside the originating segment, leading to more efficient resource utilization.
- ✗
To reduce network latency.
Why it's wrong here
Network segmentation typically does not reduce network latency; in fact, it can often introduce additional latency. When traffic needs to flow between different network segments (e.g., inter-VLAN routing), it must traverse a Layer 3 device like a router or a Layer 3 switch. This routing process adds processing time and potentially extra hops, which can increase the overall delay experienced by packets compared to direct Layer 2 communication within a single, unsegmented network.
- ✗
To simplify routing tables.
Why it's wrong here
Implementing network segmentation generally increases the complexity of routing tables rather than simplifying them. Each new segment (VLAN or subnet) requires specific routing entries to enable communication between segments and to the wider network. As the number of segments grows, so does the number of routes and associated access control lists (ACLs) that must be defined, managed, and maintained, leading to more intricate routing configurations.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every CISSP question from scratch — 747 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISSP exam.