Micro-segmentation

Question 1

Micro-segmentation

Answer 1

Takes the concept of logical segmentation to a more granular level by further dividing apps or workloads. The small segments or microsegments contain a specific workload or functionally similar/identical nodes. Policies and controls are then targeted to these microsegments.
Micro-segmentation limits scope of impact, outage, or breach (lateral movements, etc)

Question 2

Network Overlay

Answer 2

Uses a method of encapsulation such as tunneling to package and transport data. This encapsulation allows data packets from the overlay to be wrapped and transported across the underlying network as if they were part of that network.

Question 3

Distributed Firewalls

Answer 3

Network security solution that applies firewall policy to all devices in a network. Work across many points in the network. Use software agents installed on each network device that enforce network’s security policy on all incoming and outgoing traffic.

Question 4

Zero Trust

Answer 4

No user, endpoint, application, or workload can be trusted without verification. It can be applied in a dynamic environment with micosegmentation.