Skip to content

FRM Part II · FRM Exam Part II · Case Study: Cyberthreats and Information Security Risks

A retail bank discovers that attackers entered through a vendor's remote-access credentials, moved laterally across its flat internal network, and reached the customer database. Which control improvement most directly limits the ability of an intruder to move laterally after an initial compromise?

Network segmentation with restricted access between zones best limits lateral movement. It confines an intruder who has entered through one point, such as a vendor credential, so they cannot freely reach sensitive systems like the customer database without passing additional controls.

  1. ANetwork segmentation with restricted access between zonesCorrect
  2. BExtending the retention period of customer marketing records
  3. CIncreasing the frequency of annual staff appraisal reviews
  4. DAdding more branches with physical security guards

Explanation

Lateral movement is enabled by flat networks. Segmentation confines an intruder to the compromised zone and forces additional authentication to cross boundaries. The other options do not address internal network access paths.

Did you get it right without looking?

One question tells you little. A timed set on Case Study: Cyberthreats and Information Security Risks shows your real accuracy, how long you take and where you lose marks.

Practise Case Study: Cyberthreats and Information Security RisksFree diagnostic mock

More Case Study: Cyberthreats and Information Security Risks questions