Examkin

Soru

Zorluk: OrtaZero Trust Architecture Principles

A financial services firm is implementing Zero Trust Architecture (ZTA) principles to govern remote employee access to cloud-hosted databases and web services. A security engineer is establishing authorization policies at the gateway level. To align with the core Zero Trust tenets of continuous verification and explicit validation, which of the following mechanisms should the engineer enforce?

  1. Evaluating identity, device compliance posture, and contextual risk dynamically for every single access request regardless of user location or prior authenticationCevap
  2. B
    Automatically granting full resource access to incoming traffic once it is verified to originate from an encrypted corporate VPN tunnel
  3. C
    Assigning resource permissions automatically upon initial multi-factor authentication completion without performing per-request authorization checks
  4. D
    Replacing inline policy enforcement with post-event SIEM audit log monitoring to serve as a preventive access control mechanism

Cevap

Evaluating identity, device compliance posture, and contextual risk dynamically for every single access request regardless of user location or prior authentication
The correct answer aligns directly with Zero Trust Architecture (NIST SP 800-207) core principles. Under Zero Trust, no user, device, or network segment is implicitly trusted. Every individual request must be explicitly validated using identity, real-time device health posture, and context before granting access.

Adım Adım Çözüm

1
Identify the core requirement of Zero Trust Architecture (ZTA)
ZTA relies on the fundamental tenet: 'Never trust, always verify.'
Perimeter boundaries are no longer sufficient; all requests must be verified explicitly.
2
Analyze how continuous verification applies to access control enforcement
Access must be granted on a per-session, per-request basis by evaluating identity, device posture, location, and risk context.
Prior login status or network location cannot grant persistent implicitly trusted access.
3
Evaluate the choices against Zero Trust principles
The mechanism that continuously re-evaluates risk, identity, and device health per request correctly implements ZTA explicit validation.
This prevents lateral movement and addresses session hijack risks.

Anahtar Kavram

Continuous verification and explicit validation in Zero Trust Architecture
Bu soruyu puanla

Konular

Zero Trust Architecture Principles

Bu konudan daha fazla soru