CISSP Practice Question: What would MOST likely happen if a mid-sized financial firm fails to…

Correct Answer: A. Increased risk of data breaches

Explanation (CISSP Manager Logic):

A flat network architecture lacks containment, allowing a single compromise to result in lateral movement across the entire environment. From a business perspective, failing to segment increases the "blast radius" of an incident, directly threatening the organization's most sensitive financial assets and operational continuity.

By implementing network segmentation, you:

• Limit the scope of potential security breaches.
• Reduce the complexity and cost of compliance audits.
• Isolate critical assets from general user traffic.

While the other options are relevant, they fall short because:

• B: Flat networks often suffer from congestion, whereas segmentation typically improves performance by reducing broadcast traffic.
• C: Security failures resulting from poor architecture erode customer trust rather than enhancing it.
• D: Compliance becomes significantly more difficult and expensive without clear boundaries between sensitive and non-sensitive data.

Think like a manager:

Apply the principle of least privilege to the network layer. Effective segmentation is a strategic risk-reduction tool that protects the organization’s reputation by isolating high-value assets.