Network Segmentation

Summary

Dividing a network into isolated zones so a breach in one segment can't easily spread to others — one of the highest-impact defensive architecture decisions an organization can make.

• 1Diagram a segmented network design for a hypothetical organization (e.g. isolating guest Wi-Fi from internal systems).
• 2Learn why flat, unsegmented networks make lateral movement trivial for an attacker.
• 3Understand the concept of a DMZ (demilitarized zone) for public-facing services.