Examkin

Soru

Zorluk: KolayZero Trust Architecture Principles

An enterprise organization is updating security policies for employees accessing corporate SaaS applications. To align with Zero Trust Architecture principles, the security engineering team configures the identity provider to re-evaluate user identity, device health posture, and geolocation context for every single access request, rather than granting trusted access for the duration of the session after initial login. Which core Zero Trust Architecture principle is directly implemented by this configuration?

  1. Explicit verificationCevap
  2. B
    Implicit perimeter trust
  3. C
    Static authorization
  4. D
    Perimeter deterrence

Cevap

Explicit verification is the core Zero Trust Architecture principle implemented, as it requires authenticating and authorizing every access attempt based on real-time contextual data points.
Explicit verification requires continuously authenticating and authorizing every access request based on all available data points (such as identity, device health, location, and service posture) rather than relying on persistent session trust.

Adım Adım Çözüm

1
Analyze the operational scenario requirements
The system forces continuous validation of identity, device health, and environmental context for each individual request instead of trusting an initial login session.
Identifying the system behavior isolates which architectural philosophy is being practiced.
2
Map the implementation behavior to Zero Trust tenets
Evaluating risk dynamically on every request aligns directly with the 'Verify explicitly' principle of Zero Trust.
Zero Trust operates under the premise that no session or network segment should be granted implicit or persistent trust.

Anahtar Kavram

Explicit Verification in Zero Trust Architecture
Bu soruyu puanla

Konular

Zero Trust Architecture Principles

Bu konudan daha fazla soru