Examkin

Question

Difficulty: EasyZero Trust Architecture Principles

An organization is transitioning from a traditional perimeter-based security model to a Zero Trust Architecture (ZTA). Which of the following fundamental principles must the organization implement as part of this new architectural framework? (Select TWO.)

  1. Assume all network traffic is untrusted, even if originating within the internal network.Answer
  2. Perform explicit verification for every access request using dynamic identity, context, and policy evaluation.Answer
  3. C
    Grant full network segment access automatically once a remote user successfully authenticates through a VPN.
  4. D
    Rely on perimeter firewalls as the primary security control to prevent software-level application vulnerabilities.

Answer

The correct principles are assuming all network traffic is untrusted regardless of origin and explicitly verifying every access request using dynamic context and policy evaluation.
Zero Trust Architecture replaces legacy boundary-based trust with two foundational tenets: assuming that network traffic is inherently untrusted regardless of source location ('assume breach'), and enforcing explicit verification on every access request using identity, context, and policy evaluation.

Step-by-Step Solution

1
Identify the foundational trust model of Zero Trust Architecture.
Zero Trust operates under an 'assume breach' philosophy.
Internal network traffic can no longer be assumed secure simply because it originates behind a perimeter firewall.
2
Determine the required access evaluation process.
Every request must undergo explicit verification before access is granted.
Verification must continuously consider user identity, device security posture, and request context.

Key Concept

Zero Trust Core Tenets: Assume Breach and Explicit Verification
Rate this question

Topics

Zero Trust Architecture Principles

More questions from this topic