SSCP Systems Security Certified PractitionerNetwork and Communications SecurityEasy
A security analyst is investigating a network where multiple devices are experiencing intermittent connectivity issues, and a significant amount of unexpected broadcast traffic is observed. The network uses a flat topology without VLANs. Which of the following network security concepts is most directly violated by this configuration, leading to the observed issues?
- AIntegrity
- BAvailability
- CSegmentation
- DConfidentiality
Show answer & explanationAnswer & explanation
Correct answer: C. Segmentation
Segmentation is crucial for dividing a network into smaller, isolated broadcast domains. A flat topology without VLANs lacks segmentation, leading to excessive broadcast traffic and potential performance issues and security risks.
Why the other options are wrong
- A. Integrity relates to preventing unauthorized modification of information. While a flat network can make integrity harder to maintain, it's not the direct concept violated by the network's structure.
- B. Availability relates to ensuring legitimate users can access resources. While intermittent connectivity affects availability, the lack of segmentation is the root cause of the observed network behavior, not the concept directly violated.
- D. Confidentiality relates to preventing unauthorized disclosure of information, which is a potential side effect but not the direct concept violated by a flat network.
Network Segmentation
The practice of dividing a computer network into smaller subnetworks, each acting as its own broadcast domain.
- Improves network security by limiting lateral movement of threats.
- Enhances network performance by reducing broadcast traffic.
- Uses technologies like VLANs, firewalls, and subnets.
Memory trick: Secure networks Need Good Architecture, always Segment.