Question

What are the benefits of network segmentation in security operations, specifically in relation to system and network architecture concepts and operating system (OS) concepts? (Select two.)

answer

Enabling a quicker transition to a cloudless computing architecture.


Reducing the attack surface by limiting access to sensitive resources


Enabling easier access to resources across different network segments


Increasing network performance by reducing network congestion


Allowing for more effective monitoring of network traffic and detection of anomalous activity

Answer 1

- Reducing the attack surface by limiting access to sensitive resources
(Segmentation isolates assets, enforces least privilege, and limits lateral movement across system/network and OS boundaries.)

- Allowing for more effective monitoring of network traffic and detection of anomalous activity
(Segmenting traffic concentrates flows, simplifies baselines, and makes it easier to place and tune sensors, IDS/IPS, and host-level monitoring.)