CompTIA CASP+ (CAS-003) — Question 2

During a security assessment, an organization is advised of inadequate control over network segmentation. The assessor explains that the organization's reliance on VLANs to segment traffic is insufficient to provide segmentation based on regulatory standards. Which of the following should the organization consider implementing along with VLANs to provide a greater level of segmentation?

Answer options

• A. Air gaps
• B. Access control lists
• C. Spanning tree protocol
• D. Network virtualization
• E. Elastic load balancing

Correct answer: D

Explanation

Network virtualization allows for more granular control over network segments and can enhance the separation of traffic beyond what VLANs provide. Options A, B, C, and E do not offer the same level of segmentation capabilities as network virtualization, making them less suitable for meeting regulatory standards.