During a security assessment, an organization is advised of inadequate control over network segmentation. The assessor explains that the organization's reliance on VLANs to segment traffic is insufficient to provide segmentation based on regulatory standards. Which of the following should the organization consider implementing along with VLANs to provide a greater level of segmentation?
A) Air gaps
B) Access control lists
C) Spanning tree protocol
D) Network virtualization
E) Elastic load balancing

Question

Quizplus · Accepted Answer

Network virtualization provides a greater level of segmentation by creating virtual networks that are isolated from each other. This allows the organization to segment traffic based on regulatory standards, such as PCI DSS, which requires that cardholder data be isolated from other traffic.

During a Security Assessment, an Organization Is Advised of Inadequate