An autonomous manufacturing enterprise is transitioning its edge-compute microservices and industrial IoT telemetry pipeline to a Zero Trust Architecture (ZTA). A security architect must define control plane and data plane operational requirements to enforce core Zero Trust tenets across all component communications.
Which of the following architectural requirements MUST be implemented to strictly align with Zero Trust Architecture principles? (Select TWO.)
- Dynamically evaluate device health, user identity, and contextual risk attributes at the Policy Decision Point (PDP) for every transaction before authorizing access.Answer
- BEstablish an implicitly trusted internal management network zone for industrial edge devices once initial multi-factor authentication succeeds at the primary gateway.
- Enforce mutual TLS (mTLS) and continuous re-authorization for all inter-service communications regardless of physical or logical network location.Answer
- DRely primarily on perimeter next-generation firewalls to perform bulk packet inspection, bypassing individual microservice Policy Enforcement Points (PEPs).
Answer
The correct requirements are dynamically evaluating device health, identity, and contextual risk at the Policy Decision Point for every transaction, and enforcing mutual TLS with continuous re-authorization across all inter-service communications regardless of network location.
Zero Trust Architecture strictly mandates explicit verification and continuous evaluation. Requiring the Policy Decision Point (PDP) to dynamically evaluate posture, identity, and risk metrics for every transaction ensures access decisions reflect real-time threat contexts. Furthermore, enforcing mutual TLS (mTLS) and continuous re-authorization across all inter-service communications aligns with the assumed breach paradigm, eliminating implicit trust based on network topology.
Step-by-Step Solution
Key Concept
Zero Trust Architecture Principles: Explicit Verification, Continuous Authentication, Assumed Breach, and Microsegmentation