An organization has recently recovered from an incident where a managed switch had been accessed and reconfigured without authorization by an insider. The incident response team is working on developing a lessons learned report with recommendations.
Which of the following recommendations will BEST prevent the same attack from occurring in the future?
A . Remove and replace the managed switch with an unmanaged one.
B . Implement a separate logical network segment for management interfaces.
C . Install and configure NAC services to allow only authorized devices to connect to the network.
D . Analyze normal behavior on the network and configure the IDS to alert on deviations from normal.
Answer: B