ISM guideline: segmentation and segregation
Name:
Date:
Class:
A
Quick Questions
Shade in the A or B circle for each question.
1. Does the guideline say to divide the network into separate zones?
2. Should access between zones be limited?
3. If one zone is breached, should the attack be able to spread to every other zone?
4. Should sensitive systems be kept in their own separate zone?
5. Does connecting every system together follow the segmentation guideline?
B
Match the Pairs
Draw a line connecting each item on the left to its match on the right.
| Left column | Right column | |
|---|---|---|
| 1Divide the network into zones | AThis removes the benefit of segmentation | |
| 2Limit access between zones | BThis breaks the guideline - access should be limited | |
| 3Segmentation helps contain a breach | CSeparates the network into distinct sections | |
| 4Sensitive systems should be kept in their own zone | DStops an attacker moving freely between sections | |
| 5Connecting every system together | EExtra protection for the most important systems | |
| 6Giving every zone unlimited access to every other zone | FAn attack stays within just one zone |
C
Definitions
ISM segmentation guideline
D
Fill in the Blanks
Complete each line of code by filling in the missing parts.
1.
The network is divided into separate _____.
2.
Segregation limits ______ between zones.
3.
If one zone is breached, the attack stays
_________.
4.
Sensitive systems are kept in their own
________ zone.
5.
Connecting every system together removes the
benefit of ____________.
E
Spot the Error
Shade in the letter of the line that contains an error.
Question 1
A
Merge all zones together
B
Divide network into zones
C
Keep zones fully separate
Question 2
A
Allow full access to all zones
B
Limit access between zones
C
Keep zones separate
Question 3
A
Breach stays in one zone
B
Breach spreads everywhere
C
Zones limit access
Question 4
A
Keep sensitive systems apart
B
Mix sensitive systems with all
C
Divide network into zones
Question 5
A
Zones limit access
B
Breach stays contained
C
Connect every system together
Answer Key
ISM guideline: segmentation and segregation
Section A: Quick Questions
Q1
B — Yes
Q2
A — Yes
Q3
A — No
Q4
A — Yes
Q5
B — No
Section B: Match the Pairs
Q1
Divide the network into zones → Separates the network into distinct sections
Q2
Limit access between zones → Stops an attacker moving freely between sections
Q3
Segmentation helps contain a breach → An attack stays within just one zone
Q4
Sensitive systems should be kept in their own zone → Extra protection for the most important systems
Q5
Connecting every system together → This removes the benefit of segmentation
Q6
Giving every zone unlimited access to every other zone → This breaks the guideline - access should be limited
Section C: Definitions
Q1
ISM segmentation guideline — A rule that tells organisations to divide their network into separate zones and limit access between them, so a breach stays contained.Section D: Fill in the Blanks
Q1
The network is divided into separate zones.Q2
Segregation limits access between zones.Q3
If one zone is breached, the attack stays
contained.Q4
Sensitive systems are kept in their own
separate zone.Q5
Connecting every system together removes the
benefit of segmentation.Section E: Spot the Error
Q1
A — Line 1 says to merge all zones together, but segmentation means keeping zones separate.
Q2
A — Line 1 says to allow full access to all zones, but access between zones should be limited.
Q3
B — Line 2 says a breach spreads everywhere, but segmentation should contain a breach to one zone.
Q4
B — Line 2 says to mix sensitive systems with everything, but sensitive systems should be kept in their own separate zone.
Q5
C — Line 3 says to connect every system together, but doing so removes the benefit of segmentation.