mediumMultiple Select
SSCP Practice Question: Which TWO are benefits of network segmentation…
Which TWO are benefits of network segmentation using VLANs? (Choose two.)
⚠ Common exam trap
ISC2 often tests the misconception that VLANs increase bandwidth, when in fact they only reduce unnecessary traffic (like broadcasts) but do not add physical throughput.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Improved security through traffic isolation
Option B is correct because VLANs logically isolate groups of devices into separate broadcast domains, so traffic from one VLAN cannot reach another without an explicit Layer 3 device (router or Layer 3 switch) applying ACLs or firewall rules, which improves security through traffic isolation. Option C is correct because each VLAN forms its own broadcast domain, so broadcasts (e.g., ARP requests) are confined to the originating VLAN instead of flooding the entire flat network, thereby reducing overall broadcast traffic. Option A is not a guaranteed benefit: VLANs do not inherently increase bandwidth, and inter-VLAN traffic must still traverse a router or Layer 3 switch, which can even become a bottleneck. Option D is wrong because VLANs actually require Layer 3 routing (router-on-a-stick or an SVI on a multilayer switch) for hosts in different VLANs to communicate. Option E is wrong because IP address management is not simplified by VLANs alone; it typically requires DHCP scopes per VLAN/subnet and careful subnet planning, and can become more complex with many VLANs.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Increased available bandwidth
Why it's wrong here
VLANs logically partition a switch into separate broadcast domains; they do not add physical link capacity or increase aggregate throughput. It tempts because containing broadcasts reduces unnecessary traffic on each segment, but available bandwidth per link is unchanged — segmentation limits broadcast scope, not bandwidth.
- ✓
Improved security through traffic isolation
Why this is correct
VLANs logically partition a switched network, so broadcast domains and traffic are confined to each segment. Hosts on separate VLANs cannot communicate directly without a router or firewall, limiting lateral movement and satisfying the segmentation requirement.
- ✓
Reduced broadcast traffic
Why this is correct
VLANs confine broadcast frames to a single logical segment, so ARP requests and other broadcasts no longer flood every switch port. This directly reduces broadcast traffic across the network, satisfying the segmentation benefit the question asks for.
- ✗
Elimination of routing requirements
Why it's wrong here
VLANs operate at Layer 2 and still require Layer 3 routing for inter-VLAN traffic, so routing is not eliminated; if anything, inter-VLAN routing must be configured. It tempts because collapsing broadcast domains can reduce some routing complexity, but routing between segments remains mandatory.
- ✗
Simplified IP address management
Why it's wrong here
VLANs create separate broadcast domains, and each typically needs its own subnet, which multiplies address pools and gateway configuration rather than simplifying IP management. It tempts because logical grouping can align subnets with departments, but that is organisation, not simplification.
Visual reference
Go deeper
Related to this question
About these practice questions
This SSCP question is part of Courseiva's 971-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.