Examkin

Question

Difficulty: HardZero Trust Architecture Principles

A high-precision robotics enterprise is implementing Zero Trust Architecture (ZTA) controls for remote field engineers accessing edge industrial control systems. An engineer successfully authenticates and establishes an active session to deploy firmware. Ten minutes into the session, real-time endpoint telemetry alerts the system that the engineer's workstation has disabled its local host firewall and initiated an unverified concurrent wireless network connection, severely degrading its dynamic security posture score. Which of the following actions should the Policy Decision Point (PDP) execute to maintain Zero Trust tenets?

  1. Signal the Policy Enforcement Point (PEP) to immediately revoke or restrict access to the active session based on continuous, real-time evaluation of the endpoint's degraded trust score.Answer
  2. B
    Allow the active session to persist until the session token naturally expires, relying on the successful initial authentication to guarantee access legitimacy.
  3. C
    Redirect the workstation's network traffic to an internal encrypted VPN tunnel under the assumption that internal segment routing mitigates endpoint vulnerability risks.
  4. D
    Modify the user's role-based access control (RBAC) profile in the directory service to permanently revoke all identity authentication privileges.

Answer

Signal the Policy Enforcement Point (PEP) to immediately revoke or restrict access to the active session based on continuous, real-time evaluation of the endpoint's degraded trust score.
Under Zero Trust Architecture (ZTA) principles (such as NIST SP 800-207), access is continuously re-evaluated based on real-time threat intelligence and endpoint security posture telemetry. When an endpoint's posture degrades mid-session (such as disabling a host firewall or establishing an untrusted connection), the Policy Decision Point (PDP) must dynamically re-evaluate trust and command the Policy Enforcement Point (PEP) to restrict or terminate the active access session.

Step-by-Step Solution

1
Analyze the incident context against Zero Trust Architecture principles.
Identified that endpoint security posture degraded during an active session after initial authentication.
Zero Trust tenets dictate that trust is never implicit and must be continuously evaluated based on real-time telemetry.
2
Evaluate the architectural roles of the Policy Decision Point (PDP) and Policy Enforcement Point (PEP).
The PDP makes access decisions based on dynamic contextual signals, while the PEP enforces those decisions at the data plane.
The PDP must continuously synthesize telemetry signals (such as host firewall status and network connections) to determine ongoing authorization.
3
Select the response that correctly enforces continuous dynamic verification.
Instructing the PEP to dynamically restrict or terminate the session upon posture degradation aligns directly with ZTA standards.
Static session persistence, VPN redirection, or indiscriminate credential deletion fail to satisfy continuous dynamic policy decision requirements.

Key Concept

Continuous Verification and Dynamic Context-Based Policy Enforcement in Zero Trust Architecture
Estimated Time:2m 0s
Rate this question

Topics

Zero Trust Architecture Principles

More questions from this topic