300-540 · Question #16
What should be used to protect against lateral movements during a Cisco NFVI security breach?
The correct answer is C. Network segmentation. In Cisco NFVI security architecture, the primary defense against lateral movement (an attacker moving from one compromised node to another) is network segmentation. Separates workloads (compute, storage, management, tenant networks) Prevents attackers from pivoting inside the…
Question
What should be used to protect against lateral movements during a Cisco NFVI security breach?
Options
- AWi-Fi Protected Access
- BWeb application firewall
- CNetwork segmentation
- DData encryption
How the community answered
(44 responses)- A11% (5)
- B7% (3)
- C80% (35)
- D2% (1)
Explanation
In Cisco NFVI security architecture, the primary defense against lateral movement (an attacker moving from one compromised node to another) is network segmentation. Separates workloads (compute, storage, management, tenant networks) Prevents attackers from pivoting inside the NFVI Reduces blast radius during breaches Enforces micro-segmented virtual network boundaries WPA protects Wi-Fi, not NFVI. WAF protects web apps, not internal movement. Data encryption protects confidentiality, not lateral movement control. Thus, network segmentation is the correct solution.
Topics
Community Discussion
No community discussion yet for this question.