Home > Glossary > Certified Information Systems Security Professional > Software Defined Networking (SDN)

📖 What is Software Defined Networking (SDN)?

Software Defined Networking (SDN) is a network architecture approach that decouples the control plane from the data plane. This allows network administrators to manage network traffic centrally via software rather than configuring individual hardware devices, increasing agility in large environments.

🥋 Sensei Says:

"The 'Control Plane' makes the decisions about where traffic goes, while the 'Data Plane' is responsible for actually moving the packets."

📚 Certification: Certified Information Systems Security Professional (CISSP)

🔑 What are the Key Concepts of Software Defined Networking (SDN)?

  • The Control Plane acts as the brain, making routing decisions centrally, while the Data Plane executes those decisions by moving packets across the network.
  • Northbound APIs allow the controller to communicate with applications and orchestration tools, while Southbound APIs, like OpenFlow, communicate with the physical hardware.
  • SDN enables micro-segmentation, allowing administrators to define granular security policies for individual workloads regardless of their physical location in the network infrastructure.
  • Centralized orchestration reduces manual configuration errors and allows for rapid, automated network changes across the entire environment from a single management console.
  • The SDN controller represents a single point of failure and a high-value target, requiring robust high-availability configurations and strict access controls.

🎯 How does Software Defined Networking (SDN) appear on the CISSP Exam?

You may be asked to identify the architecture that allows a network administrator to change traffic flow patterns across multiple switches simultaneously without accessing each device individually.

A scenario might describe a need for granular security policies that follow a virtual machine as it migrates across hosts; identify SDN-enabled micro-segmentation as the solution.

Expect questions about the security risks associated with centralized control, specifically focusing on the impact of a compromised SDN controller on the entire network fabric.

❓ Frequently Asked Questions

What is the difference between SDN and Network Function Virtualization (NFV)?

SDN focuses on separating the control and data planes to manage traffic flow, whereas NFV replaces dedicated hardware appliances, such as firewalls or load balancers, with software running on virtual machines.


How does SDN facilitate a Zero Trust architecture?

SDN enables micro-segmentation, allowing the network to be divided into small, isolated zones. This ensures traffic is strictly controlled between workloads, effectively preventing lateral movement by attackers.


What happens to the data plane if the SDN controller becomes unavailable?

Depending on the implementation, the data plane may continue to forward traffic based on the last known instructions or cached flows, but no new routing decisions can be made.

Related Terms from Certified Information Systems Security Professional

📝 Related Study Guides

Study Guide 10 min read

How to Pass the CISSP Exam: A Realistic 2026 Study Plan

To pass the CISSP, you must transition from a technical mindset to a managerial one, focusing on risk management and policy over implementation. Success requires a 3-6 month study plan covering all eight domains, using adaptive practice exams to identify gaps and mastering the "mile wide, inch deep" breadth of the CBK.

Career Guide 10 min read

CISSP Experience Requirements: How to Get Your Waiver in 2026

To earn the CISSP, you need five years of cumulative, paid work experience in two or more of the eight CISSP domains. You can obtain a one-year waiver through a four-year college degree or approved professional certifications. Those lacking full experience can become an Associate of ISC2 after passing the exam.

Deep Dive 8 min read

Kerberos Authentication Explained for the CISSP Exam

Kerberos is a ticket-based authentication protocol designed to provide strong authentication for client/server applications by using secret-key cryptography. It utilizes a trusted third party called the Key Distribution Center (KDC) to issue tickets, enabling Single Sign-On (SSO) and preventing replay attacks through the use of synchronized timestamps.

🧠

Test Your Knowledge

Think you understand Software Defined Networking (SDN)? Put it to the test with our practice exam.

Try 10 Free Questions

⭐ 1,000 expert-curated questions available with Premium

Upgrade Premium