Segmentation
On This Lesson 4 topics
This lesson is planned. The outline below lists the topics it will cover. The full lesson has not been published yet.
In this lesson
separate networks by sensitivity and environment.
Planned topics
- Segment by environment (prod, non-prod), by tier (web, app, data), and by sensitivity (payment components).
- Flat networks let an attacker move anywhere after one foothold.
- Segmentation also reduces compliance scope: smaller sensitive zone, smaller audit.
- Define allowed flows between segments; everything else is denied.
- Test segmentation as an assumption, not a belief.
Draft outline details
Demonstration
a flow matrix: rows are source segments, columns are destinations, cells are allowed ports or "deny".
Check your understanding
Why do flat networks increase risk?
Show answer
One compromised host can reach everything.
Practice
Apply this lesson with the module's lab, exercises and quiz.
Marking a lesson complete is optional and you can undo it any time. Your progress stays in this browser.