Which security control provides logical isolation of devices on Ethernet?

Which security control provides logical isolation of devices on Ethernet?
A . VPN
B. Firewall
C. VSAN
D. VLAN

View Answer

Answer: D

Explanation:

A VLAN is a logical network that is created by partitioning a physical network into multiple virtual networks. Devices on one VLAN are isolated from devices on other VLANs, even if they are connected to the same physical switch or router. This logical isolation is achieved by assigning each device to a specific VLAN based on its MAC address, IP address, or port.

By providing logical isolation, VLANs can improve network security by preventing unauthorized access and reducing the risk of network attacks. VLANs can also improve network performance by reducing broadcast traffic and enabling traffic prioritization.

In contrast, a VPN (Virtual Private Network) provides secure remote access to a network over an untrusted network, such as the Internet. A firewall is a network security device that monitors and controls incoming and outgoing network traffic based on predetermined security rules. A VSAN (Virtual Storage Area Network) is a SAN (Storage Area Network) technology that partitions a physical SAN into multiple logical SANs, allowing different departments or applications to share the same physical storage infrastructure while maintaining logical separation.

Therefore, when it comes to providing logical isolation of devices on Ethernet, a VLAN is the security control that provides this functionality.