thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Systems & Data Center · Intermediate

Micro-Segmentation

A security approach that applies fine-grained firewall policies between individual workloads, even within the same subnet.

Definition

Micro-segmentation limits east-west lateral movement by enforcing least-privilege communication per VM or workload. It is implemented with NSX distributed firewall, Cisco ACI contracts, Cisco Secure Workload and cloud security groups.

Example

Only the app tier may reach the database tier on TCP 1433; all other east-west traffic is denied.

Exam tip

Micro-segmentation targets east-west traffic, which perimeter firewalls do not inspect.

Related terms