A security architect is evaluating whether to use a Software-Defined Networking (SDN) approach for network segmentation. What key advantage does SDN provide over traditional VLAN-based segmentation?
Select an answer to reveal the explanation.
Short Explanation
SDN wins because it decouples the control plane from the data plane, letting you enforce centralized, dynamic policies and micro-segmentation based on workload context. That gives you far more flexibility than static VLAN assignments.
Full Explanation
The correct choice is the option stating that SDN allows dynamic, policy-driven segmentation and micro-segmentation that can be programmatically adjusted based on workload context. SDN decouples the control plane from the data plane, allowing centralized policy management and dynamic micro-segmentation based on workload identity, security posture, or application context, far more granular than static VLAN assignments. The option claiming SDN eliminates physical network hardware is wrong because SDN still runs on physical hardware; it abstracts control, not infrastructure. The option claiming SDN removes routing overhead is wrong because SDN adds a control plane abstraction layer; it can optimize routing but does not inherently remove routing overhead. The option claiming SDN integrates endpoint antivirus is wrong because SDN is a network architecture concept; antivirus is a separate endpoint security function.