Which of the following network changes would MOST effectively prevent lateral movement in the future?

Lateral-moving malware has infected the server infrastructure.

Which of the following network changes would MOST effectively prevent lateral movement in the future?
A . Implement DNSSEC in all DNS servers
B . Segment the physical network using a VLAN
C . Implement microsegmentation on the network
D . Implement 802.1X in the network infrastructure

View Answer

Answer: C

Explanation:

Microsegmentation is a type of network security technique that divides a network into smaller logical segments or zones based on workload or application characteristics and applies granular policies and rules to control and isolate traffic within each segment or zone. Implementing microsegmentation on the network can help prevent lateral movement in the future after lateral-moving malware has infected the server infrastructure, as it can limit the exposure and spread of malware by restricting access and communication between different segments or zones based on predefined criteria such as identity, role, or behavior.

Reference: CompTIA Cloud+ Certification Exam Objectives, page 14, section 2.7