SGSPECTER.GHOSTCOMMUNITY EDITION
← LABS
// GUIDED TRAINING · Network

Service Segmentation

Network segmentation

Medium400 PTSOFFLINE SIMULATION
// 01 · LEARN

NETWORK SEGMENTATION

An isolated lab network should limit which hosts and ports can reach internal services. Exposing database ports to an attacker-facing segment violates separation of duties.

LEARNING GOAL

Identify the misconfiguration in the synthetic evidence and explain a defensive correction.

// 02 · INVESTIGATE

EVIDENCE

Synthetic topology:
learner-net -> web-demo:8080 ALLOW
learner-net -> db-demo:3306 ALLOW
expected: learner-net -> db-demo:3306 DENY
review_marker=segment_the_database
HINT

Compare the database connection with the expected policy.

// 03 · PRACTICE

KNOWLEDGE CHECK

Which port should not be reachable from the learner segment?

// 04 · CAPTURE FLAG

Submit the review marker in SG{marker} format.

Progress stays in this browser.