Which can be used to create a virtual local area network (VLAN)?

Creating a virtual local area network (VLAN) primarily involves segmenting a single physical network into multiple logical networks. This function is essential in providing better management, improved security, and enhanced network performance by isolating traffic.

Managed switches are equipped with the necessary features to configure VLANs because they allow the assignment of ports to specific VLANs, offering administrative control over the network segments. This capability enables devices on different VLANs to communicate under specific configurations while keeping their traffic logically separated. Managed switches support protocols such as IEEE 802.1Q, which is specifically designed for VLAN tagging and management.

Routers do play a significant role in routing traffic between VLANs, but they are not used to create VLANs themselves. Hubs do not have the intelligence to differentiate between network segments and cannot handle VLAN tagging or management, making them inadequate for this purpose. Firewalls, while they can provide security and control traffic in and out of VLANs, are not responsible for the creation of VLANs themselves.

Therefore, the ability to create VLANs solely lies with one or more managed switches, affirming that this is the correct choice.