CompTIA Security+ (SY0-601) — Question 420

An organization would like to store customer data on a separate part of the network that is not accessible to users on the mam corporate network. Which of the following should the administrator use to accomplish this goal?

Answer options

• A. Segmentation
• B. Isolation
• C. Patching
• D. Encryption

Correct answer: A

Explanation

Segmentation is the process of dividing a network into smaller, distinct segments to enhance security and control access. Isolation is more about separating systems from each other but does not necessarily involve network design. Patching is related to updating software to fix vulnerabilities, and encryption secures data during transmission or storage but does not control access to the network segments.