Am I wrong?

I took a practice test for a CISSP exam and the question is:

You want to create multiple broadcast domains on your company's network. Which if the following devices would you install?

A. Router

B. Layer 2 Switch

C. Hub

D. Bridge

The answer given is A. Router and the rationale giving is that layer 2 switches cannot create broadcast domains. The CISSP book says the same thing. However, everything I've studied in networking suggests both A and B are true but you generally use a layer 2 switch to create broadcast domains and a layer 3 devices such as a router to route between them. I would think this would be doubly true in a security exam as using a layer 3 device as the only means to segment broadcasts would leave you more vulnerable to packet sniffers.