Which network design choice helps prevent exposure of passwords and IP addresses by limiting broadcast domains?

Which network design choice helps prevent exposure of passwords and IP addresses by limiting broadcast domains?

• A. Place APs on switches
• B. Place APs on hubs
• C. Disable encryption
• D. Use open authentication

Answer: (A)

Limiting broadcast domains is about confining broadcast traffic (like ARP requests and certain discovery or management frames) to a smaller segment so sensitive information, such as internal IPs, isn’t seen by devices that don’t need it. Placing APs on switches enables you to segment the network—often with VLANs—so wireless clients share a dedicated broadcast domain separate from other parts of the network. A switch doesn’t flood every frame to every port; it forwards traffic only to the relevant port or, for broadcasts, to the ports within the same VLAN. This containment reduces who can hear broadcasts and, therefore, who might learn IP addresses or other details. In contrast, a hub repeats all traffic to every port, so broadcast and management frames are exposed to every device on the segment, increasing the chance that unintended recipients see sensitive information. The other options don’t help with this containment and can even weaken security. Disabling encryption or using open authentication exposes credentials and traffic, while placing APs on a hub would enlarge the broadcast domain rather than shrink it. So, putting APs on switches supports better network segmentation and reduces broadcast exposure.

Limiting broadcast domains is about confining broadcast traffic (like ARP requests and certain discovery or management frames) to a smaller segment so sensitive information, such as internal IPs, isn’t seen by devices that don’t need it. Placing APs on switches enables you to segment the network—often with VLANs—so wireless clients share a dedicated broadcast domain separate from other parts of the network. A switch doesn’t flood every frame to every port; it forwards traffic only to the relevant port or, for broadcasts, to the ports within the same VLAN. This containment reduces who can hear broadcasts and, therefore, who might learn IP addresses or other details.

In contrast, a hub repeats all traffic to every port, so broadcast and management frames are exposed to every device on the segment, increasing the chance that unintended recipients see sensitive information. The other options don’t help with this containment and can even weaken security. Disabling encryption or using open authentication exposes credentials and traffic, while placing APs on a hub would enlarge the broadcast domain rather than shrink it.

So, putting APs on switches supports better network segmentation and reduces broadcast exposure.