Which network design choice helps prevent exposure of passwords and IP addresses by limiting broadcast domains?

Which network design choice helps prevent exposure of passwords and IP addresses by limiting broadcast domains?

• A. Place APs on switches
• B. Place APs on hubs
• C. Disable encryption
• D. Use open authentication

Answer: (A)

Limiting broadcast domains is achieved by segmenting the network so broadcasts stay contained in a smaller portion of the network. Connecting APs to switches lets you place the APs into a dedicated VLAN, so the wireless clients’ traffic remains within that VLAN and doesn’t flood to every device on the LAN. This containment reduces exposure of internal IP addresses and control traffic to only those devices in that VLAN. If APs were placed on hubs, broadcasts would be forwarded to all devices on that hub, expanding the broadcast domain and increasing the chance that sensitive information could be seen by unauthorized devices. Disabling encryption or using open authentication doesn’t address broadcast containment and would create unsafe conditions, exposing credentials and traffic regardless of the broadcast domain. So, placing APs on switches is the design choice that best helps prevent exposure by limiting broadcast domains.