ISC2 · ISC2 CC
Segmentation and zero trust
ISC2 CC · Lesson 12 of 16 · 1:30:15
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the ISC2 Certified in Cybersecurity (CC) exam, on the 2026 outline. In this lesson: network segmentation, zones, the DMZ, VLANs, and micro-segmentation, defense in depth, and zero trust. Includes three original practice questions, with Maplewood Schools, a fictional school district, as the example.
Preview the topics
- The portal’s web server must be reachable from the internet, but internet users must never reach the internal network. Where should it sit?
- A teacher on the internal network must still prove her identity and the health of her laptop before opening the grading application. Which approach is this?
- Ransomware on a student lab computer can reach the payroll servers directly. Which change limits this most?