A company wants to ensure that even if an attacker penetrates one system, they cannot easily move to other critical systems. Which network security design principle BEST addresses this requirement?

Question

Accepted Answer

B. Network segmentation. Network segmentation divides the network into separate zones or segments, each with its own security controls and access restrictions. If an attacker compromises one segment, they cannot freely move to others, limiting the blast radius of a breach. This is a foundational security architecture principle in the SY0-701 objectives.

A company wants to ensure that even if an attacker penetrates one system, they cannot easily move to other critical systems. Which network security design principle BEST addresses this requirement?

Related Questions

Discussion