Exam CAS-003 topic 1 question 14 discussion

B. ACLs. While the VLANs segment the networks the ACLs provide authority over the actual traffic passing between.

B is the correct answer. check the link : https://searchsecurity.techtarget.com/tip/The-security-standards-dilemma-Network-segmentation-and-PCI-Compliance

Correct answer is in fact D: Network virtualization (NV) is quite different than setting up VLANs. NV allows the creation of entire networks in software including switching, routing, firewalling, and load balancing. This provides far greater flexibility and granularity. With all networking and security services handled in software and attached to VMs, labor‐intensive management and configuration processes can be streamlined and automated, and networks are created automatically to meet workload demands.

I think this has to be air gaps. Regulatory standards aren’t going to say there “has to be ACLs”. They are going to say you have to physically separate the devices. Air gaps has to be correct.

In its simplest form, network virtualization is the provisioning of network and security services independent of the physical infrastructure. By enabling network segmentation in the entire network and not just at the perimeter, network virtualization plays a key role in driving efficient network segmentation. D

B ACLs will improve existing network segmentation regardless of how the network is built. Network virtualization would be a strategy to replace the existing network with a virtualized network layer (this could involve replacing hardware or going to cloud managed networking--either way, it does not address the root problem of the question which is to improve network segmentation at layer 2).

The questions asks "Which of the following should the organization consider implementing along with VLANs to provide a greater level of segmentation?" ACLs are more for security and network virtualization is more for segmentation. I think the answer is right, D.

I am going with B: ACL - I mean think about it. We create VLANs and apply ACL to allow and deny traffic alike.

D. Network virtualization

I think the answer is Air gaps

Elastic load balancing (ELB) - is a load balancing solution that automatically scales its request-handling capacity in response to incoming application traffic.