An enterprise security architect is transitioning legacy perimeter security controls to align with Zero Trust Architecture (ZTA) design tenets. Match each Zero Trust architectural concept on the left to its corresponding operational function on the right.
- Implicit Trust Zone RemovalEliminating default trust granted to devices or users based solely on physical location or IP network position.
- Continuous Adaptive Risk EvaluationDynamically re-evaluating session state, user behavior, and asset context continuously throughout an active session.
- MicrosegmentationDividing network environments into small, isolated security zones to restrict lateral movement of threats.
- Control Plane and Data Plane SeparationDecoupling policy decision logic from application traffic paths to enforce centralized authentication and authorization.
Answer
Implicit Trust Zone Removal corresponds to eliminating default trust based on network location. Continuous Adaptive Risk Evaluation corresponds to dynamically re-evaluating session state and context throughout an active connection. Microsegmentation corresponds to dividing network environments into small isolated zones to restrict lateral movement. Control Plane and Data Plane Separation corresponds to decoupling policy decision logic from application traffic paths.
Each Zero Trust term matches its core architectural operational responsibility: removing implicit trust strips location-based assumptions; continuous adaptive evaluation continuously monitors session context; microsegmentation restricts internal lateral movement; and control/data plane separation decouples policy management from data transit paths.
Step-by-Step Solution
Key Concept
Zero Trust Architecture Principles