Exam CISA topic 1 question 1802 discussion

D is a good answer. A is the best answer. it can achieve the objective while not being as costly as ZTNA. simple question. simple answer. isolating with network segmentation such as VPN and even by implementing ZBFW features on top.

The best method to assist in isolating IoT devices from corporate network traffic in a healthcare organization is internal firewalls. They enable network segmentation, directly addressing the need for separation while supporting the real-time performance required for patient monitoring and diagnostics. Other options, such as blockchain, content filtering proxies, and zero trust architecture, are less effective or not specifically designed for this purpose, making internal firewalls the most suitable choice.

Internal firewalls are the best choice for isolating IoT devices from corporate network traffic. These firewalls can create isolated network segments, ensuring that IoT devices communicate only with authorized systems and do not interact with the broader corporate network. This segmentation minimizes security risks by limiting potential attack surfaces and preventing lateral movement within the network in case of a breach.

D. Zero Trust architecture Zero Trust architecture operates on the principle of "never trust, always verify," ensuring that every device, user, and network segment is continuously authenticated and authorized. This approach is particularly effective for isolating IoT devices because it enforces strict access controls and segmentation, reducing the risk of unauthorized access and potential breaches.

are therefore well-suited to address the need for isolation by creating segmented areas within the network that protect IoT devices and their communication, thereby minimizing risks posed to the corporate network.

I am going with D. Internal firewalls is under the umbrella of zero trust arch. I choose zero trust arch because of the broader security it supplies for security and not trusting devices external or internal. Internal firewalls would be apart of the zero trust arch.