An IoT VLAN hosts municipal security cameras that should not freely reach workstation subnets. What should limit east-west movement?
Select an answer to reveal the explanation.
Short Explanation
Cameras need a path to their recorder—not a highway into every clerk PC. ACLs/firewalls keep IoT east-west traffic on a short leash. “Any-any for the vendor” is how lateral movement gets a VIP pass.
Full Explanation
East-west ACL/firewall controls on IoT VLANs limit lateral movement from cameras and similar devices into workstation or server segments, allowing only required management and video destinations. Permissive any-any rules and equating Internet NAT with internal isolation leave municipal networks exposed. Disabling logs removes visibility needed for incident response.