Lesson 8: Network Security Architecture
Week of Tue, Nov 3 · lesson closes Mon, Nov 9
Take Meerk's quiz for Lesson 8
This lesson's items
Exact due times are in Canvas.
Watch — Professor Messer
Watch — Professor Messer: Network Security (SY0-701)
Free, independent educational resource. Not affiliated with or endorsed by CompTIA. Watch, then read the notes below.
Know these cold
- Segmentation: VLANs isolate broadcast domains. DMZ hosts public-facing servers. Microsegmentation (Zero Trust) creates granular east-west controls.
- Firewall placement: perimeter (north-south traffic), internal segmentation (east-west). NGFW adds application identification, SSL inspection, IPS.
- Zero Trust Architecture: 'never trust, always verify.' Every request authenticated + authorized regardless of source network. Microsegmentation enforces least privilege at the workload level.
Meerk's quiz — open the Lesson 8 gate
10 questions, no time limit. 85% on your first attempt in a 24-hour window opens the gate. Retakes inside the window are practice — they help you learn, they don't count. Work alone; the point is to know it, not to have seen it.
Dinner Table Question
Ask at home: If a firewall protects the perimeter, why do attackers still succeed once they are inside?
En español: Si un firewall protege el perímetro, ¿por qué los atacantes siguen teniendo éxito una vez que están dentro?