Which term refers to separating network traffic into logical segments to improve security and manageability?

Which term refers to separating network traffic into logical segments to improve security and manageability?

• A. Audit Log
• B. Network Flow (NetFlow)
• C. Virtual Local Area Network (VLAN)
• D. Data Loss Prevention (DLP) Endpoint Software

Answer: (C)

Separating network traffic into logical segments is accomplished with a Virtual Local Area Network. A VLAN divides a single physical network into multiple distinct broadcast domains, so devices in one VLAN don’t see broadcasts from another. This containment enhances security by limiting how far traffic can spread and makes management easier, since you can apply policies, access controls, and monitoring to each VLAN separately. VLANs are implemented through tagging (802.1Q) on trunk links and require inter-VLAN routing to allow communication between segments when needed.

Audit logs are records of events for auditing, NetFlow collects traffic-flow data for monitoring, and DLP endpoint software protects data from loss—none describe the idea of logically segmenting a network.