NISTNIST CSFProtect FunctionEASYFree question
What is network segmentation and how does it support the Protect function?
- A.Encrypting data at rest and in transit, and rendering it unreadable to anyone lacking the decryption key across storage tiers
- B.Dividing the network into separate segments that limit lateral movement, containing potential breaches and reducing the impact of compromised systems
- C.Training personnel to recognize phishing attempts, and reinforcing that behavior through recurring simulated campaigns each quarter
- D.Restricting removable media use, and logging each attempted connection for later security review and follow-up
Why B is correct
Network segmentation isolates different network zones, preventing an attacker who compromises one segment from easily accessing others. This limits breach scope and protects critical systems.
Know someone studying for NIST CSF? Send them this one.