Examkin

Question

Difficulty: HardZero Trust Architecture Principles

An aerospace engineering organization has implemented Zero Trust Architecture (ZTA) controls for engineers accessing proprietary CAD schematics stored in a hybrid cloud repository. During an active remote session from a corporate laptop, the security monitoring system detects that the local endpoint protection agent was disabled and the asset's dynamic risk score surged. Although the engineer successfully completed multi-factor authentication (MFA) at session initiation, access to the repository is revoked instantly. Which Zero Trust Architecture core principle is directly demonstrated by this access enforcement action?

  1. Continuous verification and dynamic risk assessment throughout the session lifecycleAnswer
  2. B
    Implicit trust placement within internal subnets once multi-factor authentication is validated
  3. C
    Perimeter-based identity authorization with static role assignments for corporate assets
  4. D
    Network-level compensating controls enforced at the boundary firewall following identity assertion

Answer

Continuous verification and dynamic risk assessment throughout the session lifecycle
The scenario demonstrates immediate access termination when a client device's security posture degrades mid-session. Under Zero Trust Architecture principles, explicit verification must occur continuously rather than once at initial authentication. Policy Decision Points (PDPs) evaluate real-time contextual signals—such as endpoint health, user risk score, and system compliance—to adjust or revoke access dynamically throughout the connection lifecycle.

Step-by-Step Solution

1
Analyze the access control trigger and response described in the scenario.
Access was granted following MFA, but was dynamically terminated mid-session due to host security posture degradation (disabled protection agent and spiked risk score).
Understanding why access was altered mid-session identifies the specific operational policy logic.
2
Evaluate the action against Zero Trust Architecture principles.
Zero Trust dictates that authentication and authorization are never static events; Policy Decision Points (PDPs) must continuously re-evaluate sessions using dynamic context and real-time security signals.
This contrasts with legacy security architectures that assume trusted status after initial authentication.
3
Select the option that accurately describes this architectural behavior.
The concept of continuous verification and dynamic risk assessment throughout the session lifecycle correctly describes immediate revocation upon host posture decay.
It explicitly captures the core ZTA tenet of continuous re-assessment without relying on implicit, persistent session trust.

Key Concept

Continuous Verification and Dynamic Context-Based Access Control
Estimated Time:1m 30s
Rate this question

Topics

Zero Trust Architecture Principles

More questions from this topic