Exam 300-420 topic 1 question 312 discussion

Answer is correct Macro vs Micro Segmentation Network segmentation can be divided into two main categories: macro segmentation and micro segmentation. Macro segmentation is the process of dividing the network into larger segments based on factors such as geography, department, or function. This is usually achieved through traditional methods such as VRF, VLANs, or firewall zoning. Micro segmentation, in contrast, involves dividing the network into smaller, more granular segments based on individual workloads or applications. This is typically accomplished using software-defined methods such as Security Group Tags (SGTs). Micro segmentation provides more granular control over traffic flows, enabling organizations to reduce the attack surface of the network by limiting the lateral movement of threats. By implementing micro segmentation, organizations can improve their security posture and better protect their critical assets. https://learningnetwork.cisco.com/s/article/software-defined-segmentation-a-primer#:~:text=Macro%20vs%20Micro%20Segmentation,better%20protect%20their%20critical%20assets.