Given the IaaS cloud service model, at which of the following layers of the platform does microsegmentation BEST apply?

While compute resources are the target of microsegmentation policies, microsegmentation itself is implemented and enforced at the network layer, not directly on the compute instance itself.

Storage is a resource protected by microsegmentation, but the segmentation mechanism is not applied within the storage layer itself; rather, it controls network access to storage.

Microsegmentation fundamentally operates by creating granular, software-defined network security zones, allowing for detailed access control policies between individual workloads or applications. It isolates workloads at the network level, enforcing security policies based on network traffic.

Management refers to the control plane for cloud resources; while it is used to configure microsegmentation, the security control itself is enforced at the network layer.