A municipal transit authority is deploying connected physical traffic signal controllers deployed across city intersections. The controllers transmit real-time telemetry to a central management server and receive timing synchronization updates. If an attacker gains physical access to a single controller on a street pole, the security team must prevent the attacker from moving laterally to other signal controllers on the network. Which of the following network design strategies best achieves this objective?
- Implement microsegmentation and strict access policies to isolate traffic between individual signal controllers.Cevap
- BPlace all street signal controllers into a single flat management VLAN protected by a centralized perimeter firewall.
- CEstablish a broad perimeter DMZ that allows unrestricted peer-to-peer traffic among edge controllers for synchronized communication.
- DDeploy honeypots at each intersection network cabinet to serve as inline preventive filtering controls.
Cevap
Microsegmentation and strict access policies should be implemented to restrict traffic between individual signal controllers.
Microsegmentation logically divides network environments into granular isolation zones down to individual workloads or devices. By enforcing strict access policies on East-West traffic, microsegmentation ensures that even if an attacker physically compromises a signal controller at an intersection, they cannot pivot or move laterally to other controllers on the same network segment.
Adım Adım Çözüm
Anahtar Kavram
Microsegmentation and East-West Traffic Isolation