A network architect is designing a new enterprise segment and wants to enforce the principle of least privilege at the network layer. Which approach best achieves this goal?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — b is correct because micro-segmentation enforces least-privilege by allowing only explicitly approved flows between hosts, limiting lateral movement. A is wrong because a flat network allows unrestricted east-west traffic after perimeter bypass.
Full explanation below image
Full Explanation
B is correct because micro-segmentation enforces least-privilege by allowing only explicitly approved flows between hosts, limiting lateral movement. A is wrong because a flat network allows unrestricted east-west traffic after perimeter bypass. C is wrong because VLANs without inter-VLAN ACLs do not restrict traffic between segments. D is wrong because a passive IDS provides visibility but does not enforce network access controls.