Examkin

Question

Difficulty: MediumZero Trust Architecture Principles

A multinational financial services enterprise is transitioning its legacy core banking infrastructure to align with Zero Trust Architecture (ZTA) principles to prevent lateral movement following network breaches. Which of the following architectural strategies MUST be implemented to adhere to Zero Trust principles? (Select TWO.)

  1. Perform explicit, continuous verification of user identity, device health, and context for every resource access request regardless of network location.Answer
  2. B
    Grant implicit trust to internal subnets once users successfully clear perimeter multi-factor authentication at the ingress gateway.
  3. Enforce strict microsegmentation and granular least privilege access controls around microservices and sensitive data stores.Answer
  4. D
    Bypass authorization checks for authenticated users to reduce latency across distributed backend microservices.

Answer

The correct answers state that organizations must perform explicit, continuous verification of user identity, device health, and context for every resource access request regardless of network location, and enforce strict microsegmentation and granular least privilege access controls around microservices and sensitive data stores.
Zero Trust Architecture relies on the fundamental tenet of assuming breach and eliminating implicit trust based on network topology. The core principles require continuous explicit verification of identity, device posture, and context for every request, alongside microsegmentation and strict least privilege access to restrict blast radius and lateral movement.

Step-by-Step Solution

1
Analyze core principles of Zero Trust Architecture (NIST SP 800-207).
Identified tenets including 'Never Trust, Always Verify', explicit continuous verification, least privilege access, microsegmentation, and assuming breach.
Zero Trust discards implicit network trust based on physical or logical location.
2
Evaluate access request verification requirements.
Requiring dynamic, continuous evaluation of user, device posture, and contextual signals fulfills explicit verification.
Initial perimeter authentication is insufficient because credentials or devices can be compromised post-login.
3
Evaluate network boundary and lateral movement controls.
Implementing microsegmentation limits impact zones and prevents unauthorized horizontal movement across microservices.
Granular network separation enforces least privilege at the workload level.

Key Concept

Zero Trust Architecture Core Tenets
Rate this question

Topics

Zero Trust Architecture Principles

More questions from this topic