Pete, a security administrator, is informed that people from the HR department should not have access to the
accounting department’s server, and the accounting department should not have access to the HR
department’s server. The network is separated by switches. Which of the following is designed to keep the HR
department users from accessing the accounting department’s server and vice-versa?

A.
ACLs

B.
VLANs

C.
DMZs

D.
NATS

Explanation:
A virtual local area network (VLAN) is a hardware-imposed network segmentation created by switches. VLANs
are used for traffic management. Communications between ports within the same VLAN occur without
hindrance, but communications between VLANs require a routing function.