Network and Infrastructure Security Questions

Assessment and design practices for securing network and infrastructure components across on premise, cloud, and hybrid environments. Core areas include network segmentation and microsegmentation, least privilege networking, firewall and router configuration, intrusion detection and prevention, network telemetry and flow logging, denial of service mitigation, secure private connectivity and virtual private networks, virtualization and container network hardening, software defined networking considerations, operational controls such as patching and configuration drift remediation, and testing approaches including network focused penetration testing and red team exercises.