CISSP · Free practice question 5 of 12
Air-gapped network physical segmentation
Holloway Water operates a safety system that must have no electronic path at all to the corporate network or the internet. Software updates are carried in on verified removable media. Which form of segmentation does this design use?
- A.An air gap
- B.A site-to-site VPN
- C.A VLAN
- D.A screened subnet
Show answer and explanation
Correct answer: A. An air gap
Why: An air-gapped network is physically separated, with no wired or wireless connection to other networks, so data crosses only through controlled media transfers. VLANs and VPNs are logical segmentation on shared infrastructure, and a screened subnet is a perimeter zone that is still connected to both internal and external networks.
More free CISSP questions
- Senior management ultimate security accountability
- Wassenaar Arrangement export of cryptography
- Brewer-Nash model prevents conflicts of interest
- Known-plaintext cryptanalytic attack
- Role-based access control by job function
- Misuse case testing of abuse scenarios
- Breach and attack simulation platforms
- Proactive hypothesis-driven threat hunting
- Lessons learned after incident closure
- Access control vestibule stops tailgating
- Cold site characteristics and recovery time