What approach divides the network to limit access to resources?

What approach divides the network to limit access to resources?

• A. Perimeter Defense
• B. Network Segmentation
• C. Access Control List
• D. VPN Tunneling

Answer: (B)

Dividing the network into smaller, isolated segments is network segmentation. By placing resources in separate segments and controlling how traffic moves between them—with VLANs, subnets, internal firewalls, and policy-based controls—you limit access across boundaries. This containment means if one segment is compromised, the attacker can’t easily reach other resources, making it easier to enforce least privilege and monitor activity. Perimeter defenses focus on the outer boundary, not internal divisions. An Access Control List is a traffic-filtering rule set, not the architectural approach to dividing the network. VPN tunneling creates secure connections for remote access, not internal segmentation.

Dividing the network into smaller, isolated segments is network segmentation. By placing resources in separate segments and controlling how traffic moves between them—with VLANs, subnets, internal firewalls, and policy-based controls—you limit access across boundaries. This containment means if one segment is compromised, the attacker can’t easily reach other resources, making it easier to enforce least privilege and monitor activity. Perimeter defenses focus on the outer boundary, not internal divisions. An Access Control List is a traffic-filtering rule set, not the architectural approach to dividing the network. VPN tunneling creates secure connections for remote access, not internal segmentation.