Certified Information Systems Auditor (CISA) — Question 1385

Which of the following security measures will reduce the risk of propagation when a cyberattack occurs?

Answer options

• A. Data loss prevention (DLP) system
• B. Perimeter firewall
• C. Network segmentation O Web application firewall

Correct answer: C

Explanation

Network segmentation is effective in controlling the spread of a cyberattack by isolating different parts of the network, thus preventing attackers from moving freely. In contrast, a Data loss prevention system, perimeter firewall, and web application firewall primarily focus on protecting data and monitoring traffic rather than directly limiting the propagation of an attack.