Pete, a security administrator, is informed that people from the HR department should not have
access to the accounting department’s server, and the accounting department should not have
access to the HR department’s server. The network is separated by switches. Which of the
following is designed to keep the HR department users from accessing the accounting
department’s server and vice-versa?

A.
ACLs

B.
VLANs

C.
DMZs

D.
NATS

Explanation:
A virtual local area network (VLAN) is a hardware-imposed network segmentation created by
switches. VLANs are used for traffic management. Communications between ports within the
same VLAN occur without hindrance, but communications between VLANs require a routing
function.