Quiz: Security Best Practices in Google Cloud: Containers — Question 5

Assuming a breach might occur, the security team needs to isolate pod-to-pod communications so that a compromised frontend container cannot freely traverse the internal network to access backend payment pods. Which control provides this micro-segmentation?