Examkin

Question

Difficulty: EasyZero Trust Architecture Principles

A system administrator is updating an enterprise security policy to align with core Zero Trust Architecture (ZTA) principles. Which of the following practices represent core tenets of Zero Trust? (Select TWO.)

  1. Explicitly verify identity, device health, and context for every access requestAnswer
  2. Enforce least privilege access by restricting user permissions to only what is necessary for specific tasksAnswer
  3. C
    Implicitly trust all network traffic that originates from inside the corporate internal network perimeter
  4. D
    Grant unrestricted resource permissions to accounts after successful initial multi-factor authentication

Answer

The core tenets of Zero Trust Architecture include explicitly verifying every access request and enforcing least privilege access controls.
Zero Trust Architecture enforces continuous explicit verification for all access requests and limits user rights through least privilege access policies to minimize risk.

Step-by-Step Solution

1
Identify core Zero Trust Architecture tenets
Zero Trust is built on the philosophy of 'never trust, always verify', assuming that threats exist both outside and inside the network.
Traditional perimeter defenses rely on implicit trust, which Zero Trust explicitly replaces with continuous verification.
2
Evaluate the requirement for verification
Explicit verification mandates that all requests are authenticated, authorized, and validated based on user identity, location, device health, and data classification.
This prevents unauthorized movement even if an attacker gains entry to the network.
3
Evaluate the requirement for access restriction
Least privilege access limits user access with Just-In-Time (JIT) and Just-Enough-Access (JEA) policies.
Restricting access reduces the blast radius in the event of a credential compromise.

Key Concept

Zero Trust Architecture Principles
Rate this question

Topics

Zero Trust Architecture Principles

More questions from this topic