CompTIA Security+ SY0-601 – Question359

A large industrial system's smart generator monitors the system status and sends alerts to third-party
maintenance personnel when critical failures occur. While reviewing the network logs, the company's security
manager notices the generator's IP is sending packets to an internal file server's IP. Which of the following
mitigations would be BEST for the security manager to implement while maintaining alerting capabilities?


A.
Segmentation
B. Firewall allow list
C. Containment
D. Isolation

Correct Answer: B