Your organization is redesigning its network architecture after a breach that allowed lateral movement from the guest Wi-Fi network to internal servers. Which design principle most directly addresses this failure?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — a is correct because network segmentation creates isolated zones (e.g., guest, internal, DMZ) with enforced access controls between them, directly preventing lateral movement. B is wrong because a perimeter firewall does not address east-west traffic between internal segments.
Full explanation below image
Full Explanation
A is correct because network segmentation creates isolated zones (e.g., guest, internal, DMZ) with enforced access controls between them, directly preventing lateral movement. B is wrong because a perimeter firewall does not address east-west traffic between internal segments. C is wrong because packet capture is a detective control, not preventive. D is wrong because password complexity does not affect network-level isolation.