Part of the DJames Network / DJames617
Explore the Network
DJames617Personal, professional, creative, and educational hubNerdDualCyber operations, intelligence, resources, and public toolsHDJamesAuthenticated application lab and proving ground
DJames617 The DoWell Nerd

SSCP Lab

Network Segmentation Review Lab

Map trusted and untrusted network paths for a small environment.

Back to LabsPractice SSCP

Goal

Map trusted and untrusted network paths for a small environment.

Estimated cost: Free when performed with local diagrams, exports, or test data. If you use a real cloud, lab, or SaaS environment, verify cost and authorization first.

Concepts Reinforced

  • segmentation
  • management plane
  • firewall zones

Prerequisites

  • A non-production lab, diagram, or exported sample data.
  • Authorization to review the data or configuration.
  • A text editor or spreadsheet for notes.

Exact Steps

  1. Draw user, server, management, guest, and IoT segments.
  2. List allowed flows between segments.
  3. Mark any path to management interfaces.
  4. Define one deny rule and one monitoring point for each risky path.

Verification

No untrusted segment can reach management interfaces without an explicit controlled path.

Cleanup

Remove any temporary diagrams that include sensitive IP ranges.