Segment the Network

Move a sensitive container to its own network — live.

A intermediate Docker challenge worth 10 points. Solve it hands-on in a real Docker environment in your browser - no local setup, no fake shells.

The Challenge

Scenario: PCI-DSS audit finding: the cardholder database pci-db shares network shared with the public web tier. Segmentation is mandatory — and you may not recreate any container.

Tasks:

• Create network pci-zone
• Connect pci-db to it, then disconnect pci-db from shared
• web-public and batch stay on shared

Commands to learn: docker network connect/disconnect, live re-homing

Run check when done.