Tools / Zero Trust Architecture (ZTA) Interview questions
How does microsegmentation limit lateral movement?
Lateral movement is how an attacker turns one compromised host into control over an entire environment, by hopping from system to system using trust relationships the network already permits. Microsegmentation removes most of those default paths.
Instead of a flat subnet where any host can reach any other host, each workload sits in its own enforced segment with a default-deny posture between segments. A flow between, say, a finance application and a marketing database is blocked unless an explicit policy allows exactly that connection, on that port, for that identity.
So if an attacker compromises a single web server, they find that server can reach only the specific backend it was explicitly authorized to call, not the rest of the environment, forcing them to defeat a new policy checkpoint at every hop instead of moving freely.
More Related questions...
