Which control most directly reduces blast radius when ransomware lands on a single endpoint?
MFA on VPN
Full-disk encryption
Network segmentation with least privilege
Email banner warnings
This question is part of this quiz :