Examkin

Question

Difficulty: MediumZero Trust Architecture Principles

A healthcare organization is replacing its legacy virtual private network (VPN) infrastructure with a Zero Trust Architecture (ZTA) to secure access to electronic health record (EHR) microservices hosted across hybrid cloud environments. Which of the following design decisions directly reflect core Zero Trust Architecture principles? (Select THREE.)

  1. Re-evaluating identity, device posture, and risk context continuously throughout active sessions rather than relying solely on initial authenticationAnswer
  2. Implementing microsegmentation and granular authorization policies that restrict access strictly to the explicit resources required for each requestAnswer
  3. Treating all network traffic as inherently untrusted regardless of whether it originates inside or outside the traditional corporate network boundaryAnswer
  4. D
    Granting persistent network-wide access to internal database subnets once a remote user successfully completes initial multi-factor authentication
  5. E
    Relying primarily on network-level firewall IP filters to differentiate authenticated administrative access from general traffic without inspecting application context

Answer

The core tenets of Zero Trust Architecture include continuous verification of context throughout active sessions, enforcement of least privilege via granular microsegmentation, and assuming breach by treating all internal and external network traffic as untrusted.
Zero Trust Architecture is anchored by three primary tenets: explicit verification (continuously validating identity, device posture, and context), least privilege access (restricting access to specific resources via microsegmentation), and assuming breach (treating all network traffic as untrusted regardless of origin). Together, these mechanisms eliminate implicit perimeter trust.

Step-by-Step Solution

1
Analyze the core principles defined by Zero Trust Architecture (such as NIST SP 800-207).
Zero Trust relies on explicit verification, least privilege, and assuming breach regardless of physical or logical network position.
Traditional perimeter security relies on implicit trust within internal subnets, whereas Zero Trust removes implicit trust completely.
2
Evaluate each option against continuous verification, least privilege, and zero implicit perimeter trust.
Continuous re-evaluation of user/device risk, microsegmentation for granular access, and inspecting all network traffic regardless of origin reflect these principles.
These three practices ensure every access request is explicitly authorized using real-time context.
3
Identify misconfigurations and legacy assumptions in the remaining options.
Granting persistent network access after initial MFA and relying solely on firewall IP filters incorrectly depend on static network boundaries and implicit trust.
Static IP rules and one-time authentication fail to validate ongoing session security or application-layer context.

Key Concept

Zero Trust Architecture Principles (Explicit Verification, Least Privilege, Assume Breach)
Rate this question

Topics

Zero Trust Architecture Principles

More questions from this topic