Context: Zero Trust assumes no trust, requiring strict isolation (micro-segmentation).
Option A: Bandwidth isn’t increased by segmentation—incorrect.
Option B: Segmentation may increase route tables for granularity, not reduce them—incorrect.
Option C: Micro-segmentation isolates workloads, limiting breach impact (blast radius)—core Zero Trust goal and correct.
Option D: Inter-region connectivity isn’t simplified by micro-segmentation—incorrect.
Conclusion: Option C aligns with Zero Trust principles.
Oracle notes:
"Micro-segmentation in OCI VCNs, using NSGs and security lists, limits the blast radius of breaches by isolating resources, a key Zero Trust principle."This supports Option C. Reference:Zero Trust in OCI - Oracle Help Center(docs.oracle.com/en-us/iaas/Content/Network/Concepts/zerotrust.htm).
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit