Segmentation

Dividing a network into smaller zones to limit lateral movement and blast radius.

Segmentation divides a network into zones so a breach in one can’t move laterally into others, shrinking the blast radius. VLANs, firewalls, and host-based policies layer together; micro-segmentation pushes the idea to per-workload rules in cloud and data-center environments and is a pillar of zero trust.

PlayPrepHQ study notes are written and reviewed against primary exam sources. How we create & review content →

Related terms

Back to Security Architecture