During a network architecture review, you find that all VLANs can communicate with each other through a core switch with no inter-VLAN ACLs. The organization has PCI-scoped systems in VLAN 10 and user workstations in VLAN 20. What is the MOST critical remediation?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — c is correct because ACLs between VLANs directly enforce the required isolation between user workstations and PCI-scoped systems, satisfying segmentation requirements. A is wrong because port security prevents unauthorized devices on switch ports but does not restrict inter-VLAN communication.
Full explanation below image
Full Explanation
C is correct because ACLs between VLANs directly enforce the required isolation between user workstations and PCI-scoped systems, satisfying segmentation requirements. A is wrong because port security prevents unauthorized devices on switch ports but does not restrict inter-VLAN communication. B is wrong because physical separation is an option but ACLs on the existing infrastructure is the most practical immediate remediation. D is wrong because an IDS is a detective control that does not prevent the communication.