What is the concept of network segmentation from a security perspective, and what threat does it specifically limit?

• A.Network segmentation improves performance by reducing broadcast traffic; security is a secondary benefit
• B.Network segmentation divides the network into isolated zones (VLANs, firewall segments, DMZs) with controlled inter-zone access; it limits the blast radius of a breach: a compromised device in one segment cannot directly reach devices in other segments, slowing lateral movement and containing ransomware spread
• C.Network segmentation is primarily a regulatory requirement; it provides no practical security benefit beyond compliance, since hashing is reversible with the original key, which is how passwords are recovered at login. IDS signatures detect zero-day attacks by definition, since signatures describe unknown behavior