Examkin

Question

Difficulty: EasyZero Trust Architecture Principles

A security administrator is drafting baseline policies to align the enterprise network with Zero Trust Architecture (ZTA) principles. Which of the following fundamental tenets should be included in these guidelines? (Select TWO.)

  1. Explicitly verify the identity, context, and security posture of every access request regardless of user location.Answer
  2. B
    Automatically grant full trust to internal network traffic once a device successfully passes perimeter firewall authentication.
  3. Enforce least privilege access by restricting user permissions to only the specific resources required for their role.Answer
  4. D
    Bypass continuous access monitoring after initial single sign-on (SSO) login to optimize network bandwidth.

Answer

The correct answers are the principles of explicit verification of all requests and enforcing least privilege access.
Zero Trust Architecture operates on the core philosophy of 'Never Trust, Always Verify'. This entails explicitly authenticating and authorizing every request regardless of origin, and applying least privilege access controls to limit potential damage from compromised accounts or assets.

Step-by-Step Solution

1
Identify core Zero Trust Architecture (ZTA) principles.
ZTA relies on foundational tenets including 'Never Trust, Always Verify', explicit verification, least privilege, and assumed breach.
Establishing accurate baseline policies requires distinguishing Zero Trust tenets from legacy perimeter defenses.
2
Evaluate the option regarding explicit verification.
Verifying identity, device posture, and context for all access requests regardless of location directly reflects the 'Explicitly Verify' tenet.
Zero Trust eliminates implicit trust based on network location.
3
Evaluate the option regarding least privilege access.
Restricting permissions to only necessary resources directly aligns with the 'Least Privilege' tenet.
Limiting access reduces the blast radius of potential security compromises.

Key Concept

Core Tenets of Zero Trust Architecture
Rate this question

Topics

Zero Trust Architecture Principles

More questions from this topic