intermediate·20 min·مدفوع
Finance Subnet Default Deny
Stand up the new finance subnet default-deny from day one
السيناريو
A new finance reporting subnet is being stood up to host a small number of sensitive applications. Rather than following the network's usual pattern of "open by default, restrict specific paths as problems come up," leadership wants this one built the opposite way from the start: nothing reaches it except two explicitly documented, legitimate paths, and everything else — including combinations nobody has specifically thought to test yet — should be denied by default.
أهداف التعلّم
- acl
- nftables
- least privilege
الطوبولوجيا والإعداد
تحتوي هذه البيئة على 6 جهازًا (5 Hosts, 1 Router). تقوم بإعداد واستكشاف أخطاء المهارات المذكورة أعلاه وإصلاحها.