thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Foundational

Network Segmentation

Dividing a network into separate zones, such as VLANs or subnets, with controlled traffic between them.

Definition

Segmentation limits the spread of attacks, reduces compliance scope, and isolates sensitive or vulnerable systems. It is implemented with VLANs, subnets, firewalls, ACLs, and cloud virtual networks. PCI DSS scope can be reduced by segmenting the cardholder data environment.

Example

IoT devices are placed on their own VLAN with firewall rules allowing only required cloud connections.

Exam tip

Segmentation is a common compensating control for legacy or unpatchable systems.

Related terms