3.3 Protecting Networks: Segmentation（保护网络：网络分段）

LO 2 · EK 7 ｜ 严格按大纲顺序学习

▶ 从第一个 EK 开始看课件（幻灯片，可翻页/全屏） 点击下方任意 EK 编号（如 3.3.A.1）也可直接进入对应课件页

学习目标 Learning Objectives

3.3.A Identify techniques for segmenting a network.

- [3.3.A.1](/ek/3.3.A.1) — Firewall zones and rules can be used to create a screened subnet (also known as a demilitarized … - [3.3.A.2](/ek/3.3.A.2) — Subnetting can be used to create different subnets based on IP addressing. If a device is compro… - [3.3.A.3](/ek/3.3.A.3) — Switches can be used to create VLANs, which logically separate devices physically connected to c…

3.3.B Identify techniques for segmenting a network. Explain why network segmentation can increase network security. 3C

- [3.3.B.1](/ek/3.3.B.1) — Network segmentation refers to the process of dividing a network into smaller, isolated segments… - [3.3.B.2](/ek/3.3.B.2) — Dividing a network into smaller subnets isolates network traffic, which can prevent attacks on o… - [3.3.B.3](/ek/3.3.B.3) — Network segmentation can allow for different security policies and controls to be applied to dif… - [3.3.B.4](/ek/3.3.B.4) — Port security on a switch can prevent MAC flooding by limiting the number of addresses assignabl…

---

← 返回单元 Unit 3