VLAN Segmentation & Network Security Quiz

1. What is the native VLAN on a trunk port?

The VLAN whose frames are sent untagged across the trunk

The VLAN with the highest number assigned to the switch

Always VLAN 1 regardless of configuration

A VLAN reserved exclusively for guest traffic

2. True or False: Implementing VLAN segmentation alone is sufficient to secure a network without additional controls.

True

False

Submit

5. In the context of VLAN security, what does 'inter-VLAN routing' accomplish?

Allows controlled communication between VLANs through defined policies

Prevents any communication between VLANs

Automatically encrypts all traffic between VLANs

Eliminates the need for access control lists

6. A network administrator wants to segment IoT devices from critical infrastructure. Which approach is most effective?

Create a dedicated IoT VLAN with restricted inter-VLAN routing rules

Place all IoT devices on the native VLAN

Disable spanning tree protocol on IoT ports

Use the same VLAN as servers for easier management

7. What is the purpose of implementing a guest VLAN?

Isolate guest users from sensitive internal resources

Provide guests with administrative access

Increase bandwidth for all network users

Replace the need for a firewall

8. Which network device is responsible for routing traffic between VLANs?

A Layer 3 switch or router

A Layer 2 switch

A network hub

A wireless access point

9. To prevent VLAN hopping attacks, what configuration should be avoided?

Making the native VLAN match the management VLAN

Using strong encryption on all VLAN traffic

Enabling port security on all access ports

Implementing 802.1X authentication

10. True or False: VLAN hopping is a security vulnerability where attackers can move between VLANs.

True

False

11. What is the primary purpose of VLAN segmentation in network security?

Isolate traffic between different user groups and reduce broadcast domains

Increase network bandwidth across all segments

Replace the need for firewalls entirely

Simplify IP address management without security benefits

12. Which protocol allows dynamic VLAN assignment based on user credentials?

802.1X with RADIUS

DHCP v6

ARP spoofing

DNS hijacking

13. What is voice VLAN (VoIP VLAN) primarily used for?

Separating voice traffic to ensure quality of service and security

Blocking all audio streams on the network

Converting voice calls to text-only messages

Replacing traditional phone lines with web servers

14. When implementing a DMZ (demilitarized zone), which VLAN approach is most secure?

Place public-facing servers in a separate VLAN with restricted access rules

Use the same VLAN as internal users for simplicity

Disable all firewall rules between DMZ and internal VLANs

Route all DMZ traffic through the native VLAN

15. True or False: Devices in different VLANs can communicate directly without a routing device.

True

False

16. What is a VLAN trunk port used for?

Carrying traffic for multiple VLANs between switches

Connecting only a single VLAN to an end device

Isolating sensitive servers from all network traffic

Reducing latency between adjacent VLANs

17. Which access control method is most effective for controlling traffic between VLANs?

Firewall rules and routing policies

Increasing VLAN numbers

Disabling spanning tree protocol

Using longer subnet masks

18. What does VLAN 1 represent by default on most switches?

The native VLAN and default management domain

A reserved VLAN for guest access only

The highest priority traffic VLAN

A VLAN exclusively for IoT devices

19. In a segmented network, what is the primary role of a management VLAN?

Allow administrators secure remote access to network devices

Isolate all guest users from internal resources

Carry only voice traffic across the network

Block all incoming traffic from external networks

20. Which IEEE standard defines VLAN tagging on Ethernet frames?

802.1X

802.1Q

802.3ad

802.11ac

Infrastructure Specialist Segmenting a Vulnerable VLAN Quiz

1. What is the native VLAN on a trunk port?

2.

What first name or nickname would you like us to use?

2. True or False: Implementing VLAN segmentation alone is sufficient to secure a network without additional controls.

3. A port configured as an access port can belong to____ VLAN(s) at a time.

4. When configuring a switch for secure VLAN deployment, unused ports should be____.

5. In the context of VLAN security, what does 'inter-VLAN routing' accomplish?

6. A network administrator wants to segment IoT devices from critical infrastructure. Which approach is most effective?

7. What is the purpose of implementing a guest VLAN?

8. Which network device is responsible for routing traffic between VLANs?

9. To prevent VLAN hopping attacks, what configuration should be avoided?

10. True or False: VLAN hopping is a security vulnerability where attackers can move between VLANs.

11. What is the primary purpose of VLAN segmentation in network security?

12. Which protocol allows dynamic VLAN assignment based on user credentials?

13. What is voice VLAN (VoIP VLAN) primarily used for?

14. When implementing a DMZ (demilitarized zone), which VLAN approach is most secure?

15. True or False: Devices in different VLANs can communicate directly without a routing device.

16. What is a VLAN trunk port used for?

17. Which access control method is most effective for controlling traffic between VLANs?

18. What does VLAN 1 represent by default on most switches?

19. In a segmented network, what is the primary role of a management VLAN?

20. Which IEEE standard defines VLAN tagging on Ethernet frames?