A large retail vendor provides access to a heating, ventilation, and air conditioning vendor for the purpose of issuing billing statements and receiving payments. A
security administrator wants to prevent attackers from using compromised credentials to access the billing system, moving laterally to the point-of-sale (POS)
system, and installing malware to skim credit card data. Which of the following is the MOST important security architecture consideration the retail vendor should
impose?

A.
Data encryption
B.
Network segregation
C.
Virtual private networking
D.
Application firewalls