Segmentation in a network is primarily used to do what?

• A. Logging all traffic to a central log server.
• B. Dividing networks into isolated segments to limit lateral movement and contain breaches.
• C. Merging all network segments to increase performance.
• D. Assigning unique IPs to devices.

Answer: (B)

Segmentation is about creating isolated sections within a network so that, if one part is breached, the attacker can’t easily reach the rest. By dividing the network and enforcing policies between segments (with firewalls, VLANs, and similar controls), you contain any compromise to a small area, making it harder for an attacker to move laterally and enabling quicker detection and containment. This containment reduces the overall impact of a breach.

Other options describe different concepts. Logging traffic to a central server is about visibility and monitoring, not segmentation. Merging segments would defeat the purpose of segmentation and can increase exposure. Assigning unique IPs is a addressing task, not segmentation.