CompTIA Project+ (PK0-005)Basics of IT and GovernanceHard
A project is establishing a new virtual desktop infrastructure (VDI) for remote employees. The project manager needs to ensure that the virtual desktops are isolated from each other and the underlying physical network, preventing unauthorized lateral movement in case of a security breach. Which networking concept is crucial for achieving this isolation?
- ADomain Name System (DNS)
- BVirtual Local Area Network (VLAN)
- CNetwork Attached Storage (NAS)
- DPower over Ethernet (PoE)
Show answer & explanationAnswer & explanation
Correct answer: B. Virtual Local Area Network (VLAN)
VLANs allow logical segmentation of a physical network into multiple broadcast domains. This enables isolation of traffic between different groups of devices, even if they are connected to the same physical switch, which is crucial for isolating virtual desktops and preventing lateral movement.
Why the other options are wrong
- A. DNS translates domain names to IP addresses, which is fundamental for network communication but not for isolation.
- C. NAS provides file-level data storage to a network of computers, not network isolation.
- D. PoE delivers electrical power along with data on Ethernet cables, unrelated to network isolation.
Virtual Local Area Network (VLAN)
A logical grouping of network devices that allows them to communicate as if they were on the same physical network segment, regardless of their actual physical location.
- Segments a single physical network into multiple logical networks.
- Improves network security by isolating traffic.
- Enhances network performance by reducing broadcast domains.
Memory trick: Segment your network like rooms in a house, keeping different activities separate.