CCNA: Cisco Certified Network Associate — Question 903

Which device separates networks by security domains?

Answer options

• A. intrusion protection system
• B. firewall
• C. wireless controller
• D. access point

Correct answer: B

Explanation

The correct answer is B, the firewall, as it is specifically designed to filter traffic between different security domains, controlling access based on predetermined security rules. Options A, C, and D do not serve this primary function; an intrusion protection system monitors and protects the network but doesn't separate domains, while a wireless controller and access point primarily manage wireless network connections.