CompTIA Security+ SY0-701 Practice Question

Network segmentation is the division of a network into smaller parts to limit access and provide opportunities for enforcing security policies tailored to each segment. Creating separate network segments based on functional or departmental requirements allows an organization to control access and traffic flow within its internal network infrastructure. Using separate network segments for this purpose is the most direct method to achieve the desired outcome, providing security and performance benefits by containing risks and segregating network resources. While the use of firewalls is a measure for controlling traffic between segments, it is not the method to create those segments. On the other hand, subnets are generally used for improving network performance and managing IP address allocations, but they do not provide the same level of policy enforcement and isolation as segments. Lastly, secure channels for transmitting sensitive data are vital, but they are not a method of network segmentation; they are rather a means to protect data in transit.