What is used to reduce attack surfaces?

The correct answer is C. Segmentation. Segmentation divides a network or system into isolated zones, so that if one area is compromised, attackers cannot freely move to others - directly shrinking the number of exposed entry points (the "attack surface"). Access (A) controls who can reach resources but doesn't…

Cisco Security Solution Design and Selling

Question

Options

AAccess
BRemediation
CSegmentation
DDevice trust

How the community answered

(28 responses)

A
7% (2)
B
4% (1)
C
89% (25)

Explanation

Segmentation divides a network or system into isolated zones, so that if one area is compromised, attackers cannot freely move to others - directly shrinking the number of exposed entry points (the "attack surface"). Access (A) controls who can reach resources but doesn't physically isolate them, so the surface still exists. Remediation (B) fixes known vulnerabilities after they're discovered rather than proactively limiting exposure. Device trust (D) verifies whether a device meets security standards before granting access, but again doesn't reduce the surface itself.

Memory tip: Think of segmentation like a ship's bulkheads - compartments keep a breach from sinking the whole vessel. "Fewer connected zones = fewer places to attack."

Topics

#Network Segmentation#Attack Surface Reduction#Security Design#Threat Mitigation

Community Discussion

No community discussion yet for this question.

Full 700-760 Practice