A large industrial system's smart generator monitors the system status and sends alerts to third-party maintenance personnel when critical failures occur. While reviewing the network logs, the company's security manager notices the generator's IP is sending packets to an internal file server's IP. Which of the following mitigations would be BEST for the security manager to implement while maintaining alerting capabilities?
A) Segmentation
B) Firewall whitelisting
C) Containment
D) Isolation

Question

Quizplus · Accepted Answer

Segmentation would allow the security manager to separate the generator from the internal file server while still enabling it to send alerts to the necessary third-party personnel. This maintains the alerting capability without allowing unnecessary communication with the internal network.

A Large Industrial System's Smart Generator Monitors the System Status