CompTIA Security+ SY0-701 Practice Question

Network segmentation is the most effective choice for enhancing the defense of control systems because it creates boundaries that limit communications with less secure or external networks. This isolation is crucial for environments that manage critical processes, as it not only minimizes the potential attack surface but also contains the spread of any intrusion, thereby safeguarding essential services. While disabling unused services, applying regular updates, and encrypting storage are all important security practices, they do not provide the same level of systemic protection or containment against network-based threats that segmentation offers.