NISTNIST CSFProtect FunctionEASYFree question
What is network segmentation and how does it support the Protect function?
- A.Splitting network cables into smaller pieces, reasoning that a stateful firewall at the perimeter satisfies the whole PROTECT function for small firms
- B.Dividing the network into separate segments that limit lateral movement, containing potential breaches and reducing the impact of compromised systems
- C.Creating separate networks for each department's social media; this choice assumes that network segmentation is prohibited at Tier 1 and unlocked at Tier 3
- D.Segmenting network traffic by time of day
Why B is correct
Network segmentation isolates different network zones, preventing an attacker who compromises one segment from easily accessing others. This limits breach scope and protects critical systems.
Know someone studying for NIST CSF? Send them this one.