During a network architecture review, you find that all VLANs can communicate with each other through a core switch with no inter-VLAN ACLs. The organization has PCI-scoped systems in VLAN 10 and user workstations in VLAN 20. What is the MOST critical remediation?
Select an answer to reveal the explanation.
Short Explanation
Here's the deal — c is correct because ACLs between VLANs directly enforce the required isolation between user workstations and PCI-scoped systems, satisfying segmentation requirements. A is wrong because port security prevents unauthorized devices on switch ports but does not restrict inter-VLAN communication.
Full Explanation
C is correct because ACLs between VLANs directly enforce the required isolation between user workstations and PCI-scoped systems, satisfying segmentation requirements. A is wrong because port security prevents unauthorized devices on switch ports but does not restrict inter-VLAN communication. B is wrong because physical separation is an option but ACLs on the existing infrastructure is the most practical immediate remediation. D is wrong because an IDS is a detective control that does not prevent the communication.