Problem Statement
Which design best limits lateral movement inside a data center?
Explanation
Attackers move side to side after the first foothold. Micro-segmentation places policy boundaries between tiers, apps, and even workloads. That way a breach in one segment does not grant free access to the rest of the environment.
Code Solution
SolutionRead Only
Example policy: web → app tcp 8443 only; app → db tcp 5432 only; deny all other east-west
