What is the concept of network segmentation from a security perspective, and what threat does it specifically limit?

• A.Network segmentation prevents external attacks but does not limit threats from already-compromised internal devices
• B.Network segmentation improves performance by reducing broadcast traffic; security is a secondary benefit
• C.Network segmentation is primarily a regulatory requirement; it provides no practical security benefit beyond compliance
• D.Network segmentation divides the network into isolated zones (VLANs, firewall segments, DMZs) with controlled inter-zone access; it limits the blast radius of a breach: a compromised device in one segment cannot directly reach devices in other segments, slowing lateral movement and containing ransomware spread