Examkin

Question

Difficulty: HardZero Trust Architecture Principles

An enterprise security architect is auditing a remote access workflow designed for external software developers. Under the proposed model, after a developer successfully completes multi-factor authentication (MFA) at the edge gateway, their endpoint is assigned an IP address on the internal development network segment. From that point forward, the session maintains open access to all internal repository servers and staging databases without requiring further authentication or posture checks until disconnect. Which of the following best evaluates this architecture against Zero Trust Architecture (ZTA) principles and identifies the necessary architectural remediation?

  1. The design violates Zero Trust by granting implicit perimeter trust following initial authentication; access must be continuously evaluated and authorization granted per resource request using microsegmentation.Answer
  2. B
    The design violates Zero Trust by failing to prioritize perimeter VPN tunneling over internal access; perimeter encryption must be upgraded to secure the legacy network boundaries before internal access is evaluated.
  3. C
    The design violates Zero Trust by treating multi-factor authentication as an authorization decision; identity verification mechanisms should be removed from access policies to rely exclusively on user directory group objects.
  4. D
    The design violates Zero Trust by misclassifying the edge gateway as a preventive control; the gateway should be designated strictly as a detective control to enable automated SIEM logging.

Answer

The proposed architecture violates Zero Trust principles by granting implicit network-level trust after initial authentication. It must be updated to enforce continuous validation and microsegmentation for every individual resource request.
Zero Trust Architecture operates on the fundamental principle that implicit trust must be eliminated ('never trust, always verify'). Granting broad access to internal network segments based on a single initial perimeter authentication violates this principle. The correct architecture requires continuous validation of identity, device health, and environmental context, paired with microsegmentation so that access is restricted explicitly to individual requested resources.

Step-by-Step Solution

1
Analyze the proposed access flow against NIST SP 800-207 Zero Trust Architecture core tenets.
Identified that once the initial MFA check succeeds, the user endpoint is granted persistent network-wide access to internal repository and database servers.
Zero Trust mandates that no implicit trust is granted based solely on physical or logical network location or initial perimeter authentication.
2
Evaluate the architectural flaw.
The reliance on a legacy perimeter model (VLAN assignment post-MFA) allows lateral movement if the endpoint or credentials become compromised during the active session.
Access policies in Zero Trust must be granular, dynamic, and evaluated per request rather than maintaining a persistent state across an broad network segment.
3
Select the appropriate Zero Trust remediation strategy.
Implement continuous verification (evaluating identity, device health, and context dynamically) and microsegmentation (restricting visibility and path to specific requested resources only).
This enforces explicit validation and limits the blast radius of any potential compromise.

Key Concept

Zero Trust Architecture - Implicit Trust Elimination and Continuous Verification
Rate this question

Topics

Zero Trust Architecture Principles

More questions from this topic