Certified Information Security Manager (CISM) — Question 866
Which of the following is the BEST method for assisting with incident containment in an Infrastructure as a Service (IaaS) cloud environment?
Answer options
- A. Disabling unnecessary services
- B. Implementing privileged identity management
- C. Establishing automated detection
- D. Implementing network segmentation
Correct answer: D
Explanation
Implementing network segmentation is the best method for incident containment as it helps isolate affected systems, preventing further spread of the incident. While disabling unnecessary services, implementing privileged identity management, and establishing automated detection are important security measures, they do not provide the same level of containment as network segmentation does.