easyMultiple SelectObjective-mapped
SSCP Practice Question: A network administrator is implementing…
A network administrator is implementing segmentation to limit the spread of malware. Which two technologies can achieve network segmentation? (Choose two.)
⚠ Common exam trap
Many candidates confuse subnetting with segmentation, not realizing that subnetting alone provides no traffic filtering or isolation without a firewall or router ACL, and that VPNs are for secure tunneling, not internal network partitioning.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Firewalls
Firewalls are correct because they can enforce network segmentation by controlling traffic between network segments based on security policies. By placing firewalls at segment boundaries, administrators can filter traffic using rules that inspect source/destination IP addresses, ports, and application-layer data, thereby limiting the lateral spread of malware.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Firewalls
Why this is correct
Firewalls can segment by controlling traffic between network zones.
- ✗
VPN
Why it's wrong here
VPNs create encrypted tunnels, not segmentation.
- ✗
NAT
Why it's wrong here
NAT hides internal addresses but does not segment.
- ✗
Subnetting
Why it's wrong here
Subnetting is logical addressing; security requires additional controls.
- ✓
VLANs
Why this is correct
VLANs segment a network into separate broadcast domains.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 920 original SSCP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.