Incident responders trace lateral movement from a compromised lobby printer into the CAD network. Which network-security approach best limits that path going forward?
Select an answer to reveal the explanation.
Short Explanation
A hacked printer should be a dead end, not a subway to CAD. Micro-segmentation and zero-trust style rules stop east-west hops that flat networks happily allow.
Full Explanation
Micro-segmentation and distributed firewalls/IDS-IPS enforce least-privilege connectivity between workloads, limiting lateral movement from low-trust devices such as printers into critical CAD systems. This aligns with zero-trust networking: authenticate and authorize east-west flows rather than trusting location alone. Flat internal reachability after edge compromise is a primary failure mode these controls address.