Switching and VLANs
- Explain Layer 2 forwarding and logical segmentation
- Apply the idea to evidence from a realistic technology scenario
- Justify a decision using security, reliability, cost, and user impact
Switching and VLANs
A switch learns which MAC addresses appear on each port and forward frames accordingly. VLANs create separate logical broadcast domains on shared switching hardware. Traffic between VLANs requires routing and can be governed by access policy.
Decision lens
Strong technical decisions connect evidence → mechanism → impact → response. Identify what the evidence shows, explain the system behavior that produced it, state the likely effect on people or data, and choose a response that addresses the cause without creating unnecessary disruption.
Student and payroll devices plug into the same switches, and broadcasts from either group reach the other.
- 1.The current design places both groups in one broadcast domain.
- 2.Create separate student and payroll VLANs.
- 3.Use a trunk for tagged VLAN traffic between switches.
- 4.Apply routing and firewall rules so only required services cross the boundary.
What is required for hosts in different VLANs to communicate?
Which response best demonstrates complete reasoning about Layer 2 forwarding and logical segmentation?
For a scenario about Layer 2 forwarding and logical segmentation, identify the decisive evidence before naming a response. A defensible conclusion here is: VLANs provide segmentation, but policy at the routed boundary determines what communication is allowed.
Answer the 2 checkpoints as you read.
Sign in to save your progress