Examkin

Question

Difficulty: MediumZero Trust Architecture Principles

An enterprise cloud engineering team is migrating a legacy microservices architecture to align with NIST SP 800-207 Zero Trust Architecture (ZTA) principles. The modern architecture spans hybrid cloud environments and supports both remote and on-premise users. Which of the following technical design choices directly reflect core Zero Trust Architecture principles? (Select THREE)

  1. Evaluating subject identity, device posture, and context dynamically to re-evaluate trust and access rights continuously throughout every sessionAnswer
  2. Establishing microsegmentation boundaries around resources and enforcing mutual TLS (mTLS) for explicit cryptographic validation of all inter-service communicationsAnswer
  3. Applying granular, least-privilege authorization policies tailored specifically to the individual request and target resource sensitivityAnswer
  4. D
    Configuring internal database segments as trusted networks once users successfully pass initial ingress authentication
  5. E
    Delegating resource authorization decisions entirely to perimeter firewalls while internal microservices perform user identity authentication

Answer

The core Zero Trust principles are implemented by continuously re-evaluating trust throughout every active session, enforcing microsegmentation with explicit per-request cryptographic validation (such as mTLS), and applying strict least-privilege authorization policies per resource request.
Zero Trust Architecture operates on three key pillars: explicit validation, continuous verification, and least privilege access. Dynamically evaluating identity and context continuously across active sessions ensures posture changes revoke access immediately. Implementing microsegmentation and mTLS guarantees explicit cryptographic validation for every microservice request without relying on perimeter location. Applying granular least-privilege access ensures subjects only access the specific assets required for their authorized task.

Step-by-Step Solution

1
Identify the foundational tenets of Zero Trust Architecture according to NIST SP 800-207
Zero Trust tenets specify that all communication is secured regardless of network location, access is granted per session with least privilege, and access is evaluated dynamically using continuous context.
ZTA removes implicit trust from internal networks and shifts security enforcement to granular policy evaluation.
2
Evaluate each offered technical design choice against ZTA tenets
Dynamic continuous evaluation, inter-service mTLS microsegmentation, and granular least-privilege access align directly with ZTA principles. Network perimeter trust and delegating resource authorization to perimeter firewalls violate ZTA.
Zero Trust requires explicit validation and continuous policy enforcement directly protecting each asset.

Key Concept

Zero Trust Architecture Core Tenets (NIST SP 800-207)
Rate this question

Topics

Zero Trust Architecture Principles

More questions from this topic