Network and Communications Security →mediumMultiple SelectObjective-mapped

SSCP Network and Communications Security Practice Question

A company is designing a network with multiple security zones. Which TWO of the following are best practices for network segmentation? (Select TWO)

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Place a firewall between each security zone to enforce traffic filtering.

Placing firewalls between zones and using VLANs for logical separation are key segmentation practices. DMZ is a specific zone, not a universal practice.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✓
Place a firewall between each security zone to enforce traffic filtering.
Why this is correct
Firewalls enforce policies between zones.
✗
Use a single flat network to reduce complexity.
Why it's wrong here
Flat networks lack segmentation.
✓
Implement VLANs to logically separate traffic within a switch.
Why this is correct
VLANs provide logical segmentation.
✗
Disable logging on inter-zone firewalls to improve performance.
Why it's wrong here
Logging is crucial for security monitoring.
✗
Place all servers in the same broadcast domain for easier management.
Why it's wrong here
This increases attack surface.

Visual reference

Go deeper

SSCP Network and Communications Security Practice Question

Why each option matters

Option-by-option breakdown

Related to this question