Example Concept: VLANs (Virtual Local Area Networks) enable network segmentation by assigning devices to separate broadcast domains within the same physical network infrastructure. This is achieved by configuring VLAN IDs on network switches, allowing devices to communicate as if they were on the same physical network while being logically separated. VLAN tagging (802.1Q) is used to identify VLAN membership, and trunk ports are configured to carry traffic for multiple VLANs between switches. This segmentation enhances security by isolating sensitive data, improves performance by reducing broadcast traffic, and simplifies network management by allowing logical grouping of devices based on function or department.