In network segmentation and zoning, what is the primary objective?

• A. To maximize cross-zone traffic.
• B. To eliminate the need for authentication.
• C. Limit lateral movement, contain breaches, and enforce access controls.
• D. To reduce network complexity without security benefits.

Answer: (C)

Separating a network into zones focuses on containing breaches and controlling how systems communicate. By creating boundaries and applying strict access policies between zones, you limit an attacker’s ability to move from one area to another and enforce that only what is truly needed can cross boundaries. This reduces the potential impact of any compromise, makes it easier to detect abnormal traffic between zones, and speeds containment and response. In short, limiting lateral movement and enforcing access controls between segments is the primary aim. The other choices would either increase risk, undermine security, or ignore the security benefits segmentation provides.