An analyst wants to reduce the ability of an attacker who compromises one workstation to reach servers on the same network. According to the exam's mitigation techniques, which approach most directly limits lateral movement by dividing the network into smaller zones?