An enterprise network security architect is updating the organization's network architecture to enhance isolation and access control. Match each network design or segmentation technique on the left with its corresponding enterprise implementation requirement on the right.
- Air GapPhysically disconnecting a highly sensitive system completely from all internal and external network infrastructure.
- MicrosegmentationEnforcing granular, software-defined firewall policies between individual virtual machine workloads to restrict lateral East-West traffic.
- Jump BoxProviding a single, audited intermediate system for administrators to initiate managed connections into a restricted network zone.
- Screened SubnetPlacing public-facing services in an isolated perimeter network segment located between two security control boundaries.
Answer
Air Gap pairs with physical separation from all networks; Microsegmentation pairs with software-defined lateral policy enforcement; Jump Box pairs with a secure, audited administrative access gateway; Screened Subnet pairs with isolating public-facing services between security boundaries.
The concepts correctly align with their standard technical definitions: Air Gaps mandate complete physical isolation; Microsegmentation restricts East-West lateral traffic at the workload level via software policies; Jump Boxes act as secure intermediate administrative access points; and Screened Subnets isolate public-facing assets between perimeter firewalls.
Step-by-Step Solution
Key Concept
Secure Network Segmentation Archetypes