Your organization is redesigning its network architecture after a breach that allowed lateral movement from the guest Wi-Fi network to internal servers. Which design principle most directly addresses this failure?
Select an answer to reveal the explanation.
Short Explanation
Network segmentation is the answer because it puts guest Wi-Fi, internal servers, and other zones into separate areas with enforced access controls between them. That directly stops lateral movement after a breach.
Full Explanation
Network segmentation with enforced inter-zone access controls is correct because it isolates guest Wi-Fi, internal servers, and other zones, requiring explicit rules for traffic between them. That directly prevents lateral movement after a guest-network breach. Perimeter next-generation firewall controls are wrong because they mainly control north-south edge traffic, not east-west traffic between internal segments. Full packet capture on internal switches is wrong because it is detective, not preventive. Stronger network-device passwords are wrong because they do not create network-level isolation.