23. Which of the following architecture models ensures that critical systems are physically isolated on the network to prevent access from users with remote access privileges?
Answer: C
Air-gapped architecture models ensure that critical systems are physically isolated on the network.
An air-gapped architecture is designed specifically to prevent unauthorized access by ensuring that critical systems are not connected to any external network, including the Internet. This physical isolation protects sensitive data and systems from remote users and potential cyber threats.
A) Segmentation
Segmentation involves dividing a network into smaller, manageable sections to enhance security and performance. While it improves security by controlling access to different parts of the network, it does not provide the complete physical isolation that an air-gapped system offers, as segmented networks can still be interconnected.
B) Virtualized
Virtualization refers to creating virtual instances of hardware or software environments on a single physical machine. Although it can enhance resource management and efficiency, virtualization does not inherently provide physical isolation from external networks, thus making it less secure than an air-gapped architecture for critical systems.
C) Air-gapped
Air-gapped architectures are specifically designed to completely isolate critical systems from any network connection, including remote access. This method ensures that sensitive information remains secure by eliminating the risk of unauthorized access, thereby making it the best option for protecting critical systems.
D) Serverless
Serverless architecture allows developers to build and run applications without managing servers. While it simplifies deployment and scaling, it does not provide any physical isolation from network threats. Serverless systems can still be accessed remotely, which makes them less secure compared to an air-gapped model for critical systems.
Conclusion
The air-gapped architecture is the only model that guarantees physical isolation of critical systems from any network access, making it the most secure option. Other models like segmentation, virtualization, and serverless architectures provide varying levels of security but fail to offer the complete protection that an air-gapped system ensures. Thus, air-gapping is essential for safeguarding sensitive data from unauthorized access.