The big idea: Segmentation splits one network into smaller separate ones.
Traffic stays inside its own segment, so there is less of it everywhere — and a machine in one segment cannot simply reach a machine in another.
Two reasons, always: Performance — less traffic competing on any one segment.
Security — a break-in or an infection is contained where it started, instead of reaching the whole organisation.
Free preview
This is the free notes preview
You're reading the free notes. Aimnova Pro unlocks the full study experience — and you can try it with your first topic free to keep:
- FlashcardsLock in vocabulary and key terms with spaced repetition.
- Practice questionsAnswer exam-style questions and get instant AI marking.
- Mock exams & past-paper vaultSit full mocks and see exactly how examiners award marks.
- Personalised study planA daily plan built around your exam date and weak areas.
Start Studying Free Full access to Aimnova Pro · cancel anytime
Subnetting
- Divides the IP address range into smaller ranges
- Each subnet is its own network as far as IP is concerned
- Traffic between subnets must pass through a router
- That router is where rules can be enforced
VLANs
- Groups devices logically, regardless of where they are plugged in
- Configured on the switch, not by moving cables
- Two machines in one room can sit on different VLANs
- Moving someone between groups is a setting, not a rewiring job
What they share
- Traffic is kept inside its group
- Crossing groups is controlled, not automatic
- Congestion drops because fewer devices share a segment
- A compromise is contained rather than spreading
The difference in one line: Subnetting divides by address. VLANs divide by which group you belong to, whatever your address or your socket.
Organisations usually do both: a VLAN per department, each on its own subnet.
See how examiners mark answers
Access past paper questions with model answers. Learn exactly what earns marks and what doesn't.
Try Exam Vault FreeYour first topic is free to keep • No credit card required
1
Less congestion
2
Contained damage
3
Rules where segments meet
4
Resources where they are needed
What it costs: Segmentation has to be designed and maintained. Wrong rules block work that should be allowed; forgotten rules leave gaps.
And every crossing adds a routing step, which adds a little delay.
How this is tested — you must give BOTH reasons — performance and security — and show how one mechanism delivers them. It comes up two ways:
Paper 1 Section A
- Explain segmentation and its purpose, 3-5 marks
- Distinguish subnetting from VLANs
- Say why an organisation would segment
Paper 1 Section B — case study
- Recommend segmentation for the case study
- Explain which groups should be separated and why
The classic trap: Giving only the security reason. Segmentation is asked about as much for congestion as for containment — an answer with one reason caps itself at half marks.
IB-style questionExplain[4 marks]
A hospital wants guest wi-fi, staff computers and patient monitoring equipment on the same physical network. Explain how segmentation would help.
Model answer plan
See the mark-by-mark plan — for / against / judgement, with marking guidance — in study mode.