In a virtualized environment, which of the following techniques BEST mitigates the risk of pervasive network attacks?

The correct answer is A. Segmentation. Network segmentation divides the virtual environment into isolated zones so that if an attacker compromises one segment, lateral movement to other segments is blocked or severely limited. This directly counters 'pervasive' (widespread) attacks. A DMZ (B) is a specific form of…

Submitted by yuriko_h· Apr 18, 2026Protection of Information Assets

Question

Options

ASegmentation
BDemilitarized zone (DMZ)
CConfiguration assessment
DEncryption

How the community answered

(40 responses)

A
90% (36)
B
5% (2)
C
3% (1)
D
3% (1)

Explanation

Network segmentation divides the virtual environment into isolated zones so that if an attacker compromises one segment, lateral movement to other segments is blocked or severely limited. This directly counters 'pervasive' (widespread) attacks. A DMZ (B) is a specific form of segmentation but narrower in scope and typically used for internet-facing systems. Configuration assessment (C) is a detective measure, not a direct mitigation. Encryption (D) protects data confidentiality but does not prevent attackers from moving laterally across the network.

Topics

#Network Security#Virtualization Security#Network Segmentation#Attack Mitigation

Community Discussion

No community discussion yet for this question.

Full CISA Practice