A renewable energy utility operates remote maintenance workstations connected to solar farm Supervisory Control and Data Acquisition (SCADA) controllers. Under the existing access model, once a field technician completes initial multi-factor authentication (MFA) at the start of their shift, the active network connection is granted persistent trust across all internal SCADA subnets. The organization wants to refactor this workflow to align with core Zero Trust Architecture principles. Which of the following implementation strategies best satisfies this requirement?
- AEstablishing a hardened IPSec VPN tunnel that automatically trusts all internal network traffic routed to SCADA controllers once established.
- BUpgrading the initial user login process to include hardware token multi-factor authentication without altering ongoing session permission evaluations.
- Continuously evaluating user risk metrics and endpoint compliance signals before granting access to each subsequent SCADA resource.Cevap
- DDeploying detective security audit logs on SCADA endpoints to record technician actions post-shift for historical compliance verification.
Cevap
Continuously evaluating user risk metrics and endpoint compliance signals before granting access to each subsequent SCADA resource represents the correct implementation of Zero Trust principles.
Zero Trust Architecture eliminates implicit trust tied to network location or past authentication. By continuously evaluating contextual risk factors—such as user activity, endpoint security posture, and resource sensitivity—before granting access to specific assets, the system maintains strict explicit verification at all times.
Adım Adım Çözüm
Anahtar Kavram
Continuous explicit verification and elimination of implicit trust in Zero Trust Architecture