Free CompTIA Security+ SY0-701 Practice Question

Isolating industrial control systems on a separate network segment is the best practice to protect them from cyber threats. Network segmentation limits exposure by separating sensitive systems from other networks, reducing the risk of unauthorized access and malware spread. While enforcing strong password policies, installing antivirus software on control devices, and conducting regular security training are beneficial, they do not provide the same level of protection against network-based attacks as network isolation does.