Network Segmentation
Key Takeaways
Subdomain 4.2 names network segmentation with firewall zones, VLANs, and micro-segmentation as examples.
Segmentation limits how far a problem can spread between zones.
The outline page uses segmentation to keep AI development environments apart from production data.
Source: ISC2 CC Exam Outline effective September 1, 2026, subdomain 4.2, and the CC outline page, checked 2026-10-22.
Segmentation
Subdomain 4.2, Understand network security architecture, names network segmentation, with firewall zones, Virtual Local Area Networks (VLAN), and micro-segmentation as examples. Segmentation separates parts of the network so that a problem in one zone is less likely to reach another.
Source: ISC2 CC Exam Outline effective September 1, 2026 (v01/2026), subdomain 4.2, https://www.isc2.org/certifications/cc/cc-certification-exam-outline, checked 2026-10-22.
Applying Segmentation
The CC outline page gives one example: segmentation keeps AI development environments isolated from sensitive production data. In a scenario, ask which zones must be separated and what would cross between them. Choose the answer that limits that crossing to the traffic the business needs.
Source: ISC2 CC Exam Outline page, AI guidance, Domain 4, https://www.isc2.org/certifications/cc/cc-certification-exam-outline, checked 2026-10-22.
What the Outline Lists for This Section
The outline names these items. Be able to explain each one in plain language and apply it to a short scenario:
- 4.2: Network segmentation (e.g., firewall zones, VLAN, micro-segmentation)
- 4.2: Defense in Depth
- 4.2: Zero Trust (ZT)
Common Traps
A common trap is treating a single strong control as defense in depth. The concept depends on several layers, and Zero Trust depends on checking each access rather than trusting a network location.
Why does the CC outline page recommend segmenting AI development environments?
To keep them isolated from sensitive production data
To give them direct access to every system so that training jobs can read any dataset without a review
To remove the need for firewalls because the segment is internal and therefore already trusted by default
To make the network faster by sending traffic over a flat network that has no separation between zones
Sections you finish are checked off in the contents.