Zero Trust Security

Question 1

What is the goal of micro-segmentation in building a Zero-Trust approach to security?

Answer 1

The goal of micro-segmentation is to define a security perimeter around each application to prevent attackers from moving freely in the data center.

Question 2

How does micro-segmentation reduce the attack surface of an application?

Answer 2

Micro-segmentation reduces the attack surface by creating policies that restrict unnecessary network traffic, allowing the application to only communicate with the necessary resources.

Question 3

What are the steps involved in building a zero-trust security data center using micro-segmentation?

Answer 3

The steps involve determining the VMs and network traffic associated with an application, creating micro-segmentation policies to restrict unnecessary traffic, and using security policies to define the behavior and configuration of virtual machines and containers.

Question 4

What does securing the traffic and context of the application involve in micro-segmentation?

Answer 4

Securing the traffic and context of the application involves establishing security policies that define how the virtual machines and containers should behave, including the running processes and OS configurations.