AP®︎ Cybersecurity: Topic 3.3 Flashcards

Master key terms and definitions for Topic 3.3 of AP Cybersecurity – Protecting Networks: Segmentation to help you prep for quizzes and the AP exam.

0%
8 cards total
8 not started
0 learning
0 almost done
0 mastered
Term

Network Segmentation

Definition

Dividing a network into smaller, isolated segments or subnets to contain compromises, isolate traffic, and apply different security controls

1 / 8
Network Segmentation
Not Started

Dividing a network into smaller, isolated segments or subnets to contain compromises, isolate traffic, and apply different security controls

3.3.B3.3.B.1
Flat Network
Not Started

A network that places many devices in one segment with few internal boundaries, making broad access and attack spread easier after a compromise

3.3.B3.3.B.2
Lateral Movement
Not Started

Using access to one compromised device to reach additional devices, accounts, or resources

3.3.B3.3.B.2
Screened Subnet / Demilitarized Zone (DMZ)
Not Started

A typically lower-security segment between a public network and a private internal network that usually holds public-facing resources behind firewall-controlled boundaries

3.3.A3.3.A.1
Subnetting
Not Started

Dividing an IP network into smaller subnets based on IP addressing so intersubnet traffic must be routed and can be controlled

3.3.A3.3.A.2
Virtual Local Area Network (VLAN)
Not Started

A logical network segment created by switches that separates devices using shared physical switching infrastructure

3.3.A3.3.A.3
Port Security
Not Started

A switch control that limits the number of MAC addresses assignable to a physical port, helping prevent MAC flooding

3.3.B3.3.B.4
Higher-Security Zone vs. Lower-Security Zone
Not Started

A higher-security zone has more restrictive controls for sensitive or critical systems; a lower-security zone is less trusted and accepts greater exposure but remains protected

3.3.B3.3.B.3