What role does network segmentation play in protecting IoT devices from DDoS?

Network segmentation divides the network into smaller, isolated zones. By isolating IoT devices onto a separate VLAN or subnet, the impact of a DDoS attack on one segment is limited to that segment, preventing the attack from spreading to other critical parts of the network. This limits the attacker's potential reach and makes it harder to overwhelm the entire network.