Tools / Zero Trust Architecture (ZTA) Interview questions
What is microsegmentation in Zero Trust?
Microsegmentation divides a network into small, isolated zones, ideally down to the individual workload, instead of the broad subnets or VLANs used in traditional designs. Each segment enforces its own access policy rather than relying on one perimeter firewall for the whole environment.
Traffic between segments is default-deny; a flow is only permitted if an explicit policy allows it, typically tied to workload or service identity rather than IP address alone.
This is usually implemented with software-defined networking, host-based firewalls, or service mesh sidecars that enforce policy per connection, not per subnet.
Microsegmentation enforces policy at the level of:
The default traffic posture between microsegments is:
More Related questions...
