A municipal transit authority is modernizing its distributed traffic management system and fleet maintenance stations to align with Zero Trust Architecture (ZTA) principles. Which of the following architectural decisions directly fulfill core Zero Trust tenets? (Select TWO.)
- Enforcing continuous policy re-evaluation using real-time contextual risk signals for every resource request, regardless of network location.Answer
- Creating granular microsegments around enterprise workloads to isolate network traffic and strictly limit lateral movement.Answer
- CDesignating the internal corporate LAN as a trusted zone where authenticated devices are exempt from granular resource authorization checks.
- DTreating successful identity verification during initial user login as implicit authorization to access all downstream database services.
Answer
The zero trust design must continuously re-evaluate policy decisions based on real-time risk signals regardless of network location, and implement workload microsegmentation to prevent lateral movement.
Zero Trust Architecture relies on assuming breach, explicit continuous verification, and microsegmentation. Enforcing continuous policy re-evaluation ensures access is dynamically granted based on real-time posture and risk context rather than static attributes or network origin. Simultaneously, establishing microsegments around workloads enforces least privilege access and restricts an adversary's ability to move laterally across the enterprise network.
Step-by-Step Solution
Key Concept
Zero Trust Architecture Core Tenets