Examkin

Question

Difficulty: EasySecure Network Design and Segmentation

An industrial manufacturing company needs to isolate its operational technology (OT) network controlling factory machinery from the corporate IT network. The security policy mandates complete physical separation with no logical network connections, wireless links, or shared switching hardware between the two environments. Which network design technique fulfills this requirement?

  1. Air-gappingAnswer
  2. B
    VLAN segmentation
  3. C
    Perimeter DMZ deployment
  4. D
    Microsegmentation via software-defined policies

Answer

Air-gapping is the technique that establishes total physical isolation with zero shared network hardware or logical connections.
Air-gapping physically isolates a critical network from all other networks by ensuring there are no network cables, wireless connections, or shared network hardware linking them.

Step-by-Step Solution

1
Identify the key requirement in the scenario.
The requirement demands complete physical separation without shared hardware or logical connectivity.
The organization requires zero exposure of OT machinery to corporate network paths.
2
Evaluate network isolation techniques against physical separation constraints.
Techniques like VLANs, DMZs, and microsegmentation rely on shared hardware or routed paths, whereas air-gapping physically disconnects the target systems.
Air-gapping eliminates all physical interfaces, wireless links, and shared switching equipment.

Key Concept

Air-gapping and Network Isolation
Rate this question

Topics

Secure Network Design and Segmentation

More questions from this topic