CV0-003 Question #648: Real Exam Question with Answer & Explanation

The correct answer is C: Implement microsegmentation on the network.. Micro-segmentation helps in networking by creating “demilitarized zones” for security within one data center and across multiple data centers. By tying fine-grained security policies to individual workloads, micro-segmentation software limits an attacker’s ability to move lateral

Security

Question

Lateral-moving malware has infected the server infrastructure. Which of the following network changes would MOST effectively prevent lateral movement in the future?

Options

AImplement DNSSEC in all DNS servers.
BSegment the physical network using a VLAN.
CImplement microsegmentation on the network.
DImplement 802.1X in the network infrastructure.

Explanation

Micro-segmentation helps in networking by creating “demilitarized zones” for security within one data center and across multiple data centers. By tying fine-grained security policies to individual workloads, micro-segmentation software limits an attacker’s ability to move laterally through a data center, even after infiltrating the perimeter defenses.

Topics

#microsegmentation#lateral movement#network segmentation#malware prevention

Community Discussion

No community discussion yet for this question.

Full CV0-003 Practice