CompTIA Security+ (SY0-601) — Question 522

A newly identified network access vulnerability has been found in the OS of legacy IoT devices. Which of the following would best mitigate this vulnerability quickly?

Answer options

• A. Insurance
• B. Patching
• C. Segmentation
• D. Replacement

Correct answer: C

Explanation

Segmentation is the best approach to quickly mitigate the vulnerability as it involves isolating the affected devices from the rest of the network, reducing the risk of exploitation. Patching, while important, may not be feasible for legacy devices that cannot be updated. Replacement is a longer-term solution and may not be immediate enough to address the current risk, and insurance does not prevent the vulnerability from being exploited.