Learn · Learning Path

Network and Infrastructure Defense

Scope network reachability, validate segmentation evidence, and plan infrastructure remediation with rollback and verification.

Start lesson 1Network and Domain Learn

Path summary

This path separates asset existence, listening services, routing, policy permission, authentication, and end-to-end reachability. It then applies the same discipline to segmentation and infrastructure changes.

Audience, difficulty, and effort

Audience: network security engineers, network administrators, infrastructure engineers, vulnerability analysts, SOC analysts, security architects, remediation coordinators, and operations leads. Difficulty: beginner to intermediate. Prerequisites: basic IP networking, routing, firewalls, ACLs, security zones, and evidence-led investigation habits. Estimated effort: about 75 minutes.

Learning outcomes

  • Distinguish listening, routing, policy permission, and reachability.
  • Scope external, internal, lateral, and management exposure.
  • Validate segmentation with positive and negative evidence.
  • Plan remediation with dependencies, rollback, validation, residual risk, and reopening triggers.

Suggested sequence

Lesson 1

Scoping Network Exposure and Reachability

Map intended and observed paths with evidence gaps visible.

Open lesson 1

Lesson 2

Validating Segmentation and Access Controls

Test configured controls, exceptions, bypasses, and logging limits.

Open lesson 2

Lesson 3

Planning and Verifying Infrastructure Remediation

Connect treatment, rollback, validation evidence, and closure.

Open lesson 3

How the lessons connect

Reachability defines the relevant path; segmentation tests control evidence; remediation records the approved change and the proof needed to close or reopen it.

Related content

Identity and Access Defense, Network Access Control Operations, Network Change Validation and Rollback, CIDR Calculator, DNS Investigation Worksheet, and Curated CVEs.

Completion boundary

Completion means reviewing the lessons and exercises. It does not prove mastery, certification, or authorization to make network changes. It does not replace architecture review, change control, operational testing, approvals, or local evidence.

Next learning direction

Continue with Cloud and Application Security when that Learning Path becomes available.

Limitations

These fictional examples cannot prove complete visibility, segmentation effectiveness, reachability, remediation, or operational safety.

Last reviewed: Unknown. Recheck current local procedures and evidence before acting.