How do you implement microsegmentation within a software-defined data center to prevent lateral movement during a breach?