Which network segmentation construct creates separate logical broadcast domains on the same physical switch?
A CISSP practice question covering Domain 4: Communication and Network Security. Try answering before reading the explanation below.
Show options & answer
Why "VLAN" is the right answer
VLANs partition a switch into multiple Layer-2 broadcast domains using 802.1Q tagging. Subnets are Layer-3 addressing constructs that often map 1:1 to VLANs but are not the segmentation mechanism themselves. VPNs tunnel across networks; NAT translates addresses.
Study videos for this topic
Want to go deeper on Domain 4? Watch the full breakdown — every video is free, no account, no upsell.
CISSP Domain 4: OSI, IPsec, TLS & VoIP Security
Domain 4 — Communication and Network Security
CISSP Domain 4: Segmentation & Zero Trust Explained
Domain 4 — Communication and Network Security
CISSP Domain 4: Wi-Fi, WPA3, 5G & Cloud Security
Domain 4 — Communication and Network Security
CISSP Domain 4: NAC, Fiber, Firewalls & Endpoint Security
Domain 4 — Communication and Network Security
Take the full CISSP practice test
120 questions, instant explanations, study-video links on every miss. No account.