Segmentation divides a network into smaller zones and controls the traffic between them. Its purpose is containment: if an attacker compromises one device, segmentation limits how far they can move (lateral movement) and what they can reach. A flat network, where every device can talk to every other device, lets a single infected laptop reach the payroll database, the backups and the building control system. Security+ treats segmentation as one of the core mitigation techniques, alongside isolation, which is the stronger form of separation for high-risk or compromised systems.
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 7 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.