As a cybersecurity analyst at TechSafe Inc., you are working on a project to improve the security of a smart home system. This IoT-enabled system controls various aspects of the home, from heating…

Using a strong password for the control panel improves authentication but does not prevent a compromised IoT device, such as a smart bulb, from potentially attacking other devices on the same flat network.

Implementing two-factor authentication for the mobile app enhances user access security but does not provide network-level isolation between IoT devices themselves, leaving them vulnerable to lateral movement if one is compromised.

Proposing frequent system resets is a reactive measure for remediation and does not proactively prevent the spread of malware or limit the blast radius of a compromised device within the network.

Advising a dedicated, separate network for smart home devices implements network segmentation. This isolates the IoT devices from the main home network, ensuring that if one smart device is compromised, the attacker's access is contained to that segment and cannot easily spread to other, potentially more sensitive devices on the main network.