Segmentation, Patching, Isolation, and Configuration Enforcement

Introduction

This lesson completes Domain 2, Threats, Vulnerabilities, and Mitigations (22% of SY0-701), with objective 2.5: explain the purpose of mitigation techniques used to secure the enterprise. Having seen the attackers (Lesson 3) and their methods (Lesson 4), you now learn the defensive toolbox: segmentation, access control, application allowlisting, patching, encryption, monitoring, least privilege, configuration enforcement, decommissioning, and hardening techniques.

On the exam, mitigation questions usually give a problem and four plausible controls. The best answer is the control that addresses the stated weakness at the right layer and with the least disruption. This lesson gives you a method for choosing.

Learning objectives

After this lesson you will be able to: