CompTIA CySA+ (CS0-002) — Question 3

A security analyst needs to reduce the overall attack surface. Which of the following infrastructure changes should the analyst recommend?

Answer options

• A. Implement a honeypot.
• B. Air gap sensitive systems.
• C. Increase the network segmentation.
• D. Implement a cloud-based architecture.

Correct answer: C

Explanation

Increasing network segmentation is effective in reducing the attack surface by limiting the movement of attackers within the network. While implementing a honeypot, air gapping systems, and adopting cloud architecture can enhance security, they do not directly minimize the attack surface as effectively as network segmentation does.