An organization has discovered that a server processing real-time visual data could be vulnerable to a lateral movement stage in a ransomware attack. Which of the following controls BEST mitigates…

The correct answer is D. Network segmentation. Lateral movement in ransomware attacks relies on an attacker's ability to traverse the network from one compromised system to others. Network segmentation directly mitigates this by isolating the vulnerable server so that, even if compromised, the attacker cannot easily pivot…

Submitted by weili_xi· Apr 18, 2026Information Security Risk Management

Question

An organization has discovered that a server processing real-time visual data could be vulnerable to a lateral movement stage in a ransomware attack. Which of the following controls BEST mitigates this vulnerability?

Options

AEncryption of data in transit
BIntrusion detection system (IDS)
CData loss prevention (DLP)
DNetwork segmentation

How the community answered

(42 responses)

A
10% (4)
B
5% (2)
C
19% (8)
D
67% (28)

Explanation

Lateral movement in ransomware attacks relies on an attacker's ability to traverse the network from one compromised system to others. Network segmentation directly mitigates this by isolating the vulnerable server so that, even if compromised, the attacker cannot easily pivot to other systems. Encryption in transit (A) protects data confidentiality but does not limit network traversal. An IDS (B) detects movement but does not prevent it. DLP (C) targets data exfiltration, not propagation of an attack within the network. Only segmentation directly constrains the lateral movement threat.

Topics

#Lateral Movement#Ransomware#Network Segmentation#Mitigation Controls

Community Discussion

No community discussion yet for this question.

Full CISM Practice