A security engineer is designing a network segmentation strategy. The goal is to isolate different departments (e.g., Finance, HR, Engineering) from each other and from critical server infrastructure, while still allowing controlled communication where necessary. Which cybersecurity concept is this strategy primarily aiming to implement?
- ANetwork Access Control (NAC)
- BDefense in Depth
- CAttack Surface Reduction
- DZero Trust Architecture
Show answer & explanationAnswer & explanation
Correct answer: B. Defense in Depth
While network segmentation contributes to several security concepts, its primary role in isolating different parts of a network and ensuring controlled communication between them is a fundamental aspect of 'Defense in Depth'. It creates multiple layers of protection, so if one layer is breached, the attacker doesn't immediately gain access to the entire network. Zero Trust is a broader philosophy that builds upon segmentation, but segmentation itself is a core component of layered security.
Why the other options are wrong
- A. Network Access Control (NAC) enforces policies on devices connecting to the network, which is related but distinct from the architectural strategy of segmenting the network itself.
- C. Attack surface reduction aims to minimize the number of entry points for attackers, which segmentation helps indirectly, but its primary purpose is about layered protection.
- D. Zero Trust is a philosophy (never trust, always verify) that network segmentation supports, but segmentation itself is a core component of layered security.
Defense in Depth
A cybersecurity strategy in which multiple layers of security controls are placed throughout an IT system to protect the confidentiality, integrity, and availability of data.
- Multiple, overlapping security controls.
- No single point of failure.
- Network segmentation is a key component.
- Aims to slow down and contain attackers.
Memory trick: Security architectures build defenses: Defense in Depth layers walls, Zero Trust checks every door, Segmentation creates rooms.