In short
Network segmentation divides a network into separate zones, controlled by firewalls and access rules, so an attacker who gets into one part can't move freely to the rest.
Key takeaways
- Sensitive systems, such as those holding payment card data, are kept in their own segment.
- Public-facing servers often sit in a separate zone between the internet and the internal network.
- Zero trust takes this further with microsegmentation around individual workloads.
Where it's tested
ISC: Information Security Fundamentals — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
To send a confidential message that only the intended recipient can read, which key should the sender use to encrypt it?