Question

Difficulty: MediumZero Trust Architecture Principles

An organization is modernizing its security controls by adopting Zero Trust Architecture (ZTA) principles across its enterprise environment. Match each core Zero Trust principle on the left with its corresponding operational description on the right.

  • Implicit Trust EliminationTreating all network locations—whether internal or external—as untrusted untrusted environments requiring explicit validation.
  • MicrosegmentationIsolating network workloads and resources into granular enclaves to limit the lateral movement of threat actors.
  • Continuous VerificationDynamically re-evaluating identity, device health, and context throughout the entirety of an active session.
  • Least Privilege AccessGranting granular access permissions strictly on a per-resource and per-request basis.

Answer

Implicit Trust Elimination pairs with treating all network locations as untrusted; Microsegmentation pairs with isolating network workloads into granular enclaves; Continuous Verification pairs with dynamically re-evaluating context throughout an active session; Least Privilege Access pairs with granting permissions strictly on a per-resource and per-request basis.
Each Zero Trust principle correctly aligns with its operational definition: Implicit Trust Elimination treats all network environments as untrusted; Microsegmentation isolates workloads into granular enclaves; Continuous Verification continuously evaluates risk across the session lifetime; Least Privilege Access restricts privileges strictly to required resources per transaction.

Step-by-Step Solution

1
Evaluate 'Implicit Trust Elimination'
Matches treating all network zones as untrusted boundaries requiring explicit validation.
Zero Trust discards the concept of a trusted internal network segment.
2
Evaluate 'Microsegmentation'
Matches isolating workloads into granular enclaves to prevent lateral movement.
Partitioning resources creates strict micro-perimeters around individual applications or assets.
3
Evaluate 'Continuous Verification'
Matches dynamically re-evaluating identity and risk throughout an active connection.
Zero Trust requires real-time monitoring of user and device state beyond initial authentication.
4
Evaluate 'Least Privilege Access'
Matches granting rights strictly on a per-resource and per-request basis.
Access is scoped strictly to what is necessary for the specific requested operation.

Key Concept

Zero Trust Architecture Core Tenets
Estimated Time:1m 30s
Rate this question