Examkin

Question

Difficulty: MediumZero Trust Architecture Principles

A logistics corporation requires remote dispatchers to complete multi-factor authentication (MFA) when initiating their daily workspace session. Once initial login is established, users maintain persistent access to centralized fleet databases for ten hours without additional context evaluations, even if their host endpoint connects to untrusted networks or exhibits degraded compliance status mid-session. Which of the following actions best aligns this environment with core Zero Trust Architecture principles?

  1. Implementing dynamic access policies that continuously evaluate user identity, device posture, and risk factors throughout the sessionAnswer
  2. B
    Restricting database connections strictly to devices connected directly to the internal corporate local area network
  3. C
    Replacing software-based multi-factor authentication tokens with hardware security keys during initial session initialization
  4. D
    Deploying a network intrusion detection system to passively inspect database session traffic as a corrective security control

Answer

Implementing dynamic access policies that continuously evaluate user identity, device posture, and risk factors throughout the session
The correct response addresses the vulnerability by enforcing continuous verification, a foundational pillar of Zero Trust Architecture (ZTA). Rather than trusting an active session indefinitely after a single login check, ZTA continuously monitors contextual attributes—such as endpoint posture, IP changes, and user behavioral risk—to enforce real-time access decisions.

Step-by-Step Solution

1
Analyze the vulnerability described in the scenario
Identified that authentication occurs only once at session initiation, allowing unverified access for 10 hours despite potential risk posture changes.
Static, one-time authentication creates a window of implicit trust during the active session.
2
Evaluate candidate solutions against Zero Trust Architecture principles
Zero Trust requires continuous verification and explicit validation regardless of network location or initial authentication success.
Access decisions must be constantly re-evaluated based on real-time context (device health, location shifts, behavioral anomalies).
3
Select the option that eliminates implicit session trust
Dynamic policy evaluation throughout the session duration fulfills the continuous verification tenant.
It ensures access rights adjust automatically if device compliance or user risk changes.

Key Concept

Continuous Verification and Explicit Validation in Zero Trust Architecture
Rate this question

Topics

Zero Trust Architecture Principles

More questions from this topic