Examkin

Soru

Zorluk: OrtaZero Trust Architecture Principles

A healthcare organization is replacing its legacy virtual private network (VPN) infrastructure with a Zero Trust Architecture (ZTA) to secure access to electronic health record (EHR) microservices hosted across hybrid cloud environments. Which of the following design decisions directly reflect core Zero Trust Architecture principles? (Select THREE.)

  1. Re-evaluating identity, device posture, and risk context continuously throughout active sessions rather than relying solely on initial authenticationCevap
  2. Implementing microsegmentation and granular authorization policies that restrict access strictly to the explicit resources required for each requestCevap
  3. Treating all network traffic as inherently untrusted regardless of whether it originates inside or outside the traditional corporate network boundaryCevap
  4. D
    Granting persistent network-wide access to internal database subnets once a remote user successfully completes initial multi-factor authentication
  5. E
    Relying primarily on network-level firewall IP filters to differentiate authenticated administrative access from general traffic without inspecting application context

Cevap

The core tenets of Zero Trust Architecture include continuous verification of context throughout active sessions, enforcement of least privilege via granular microsegmentation, and assuming breach by treating all internal and external network traffic as untrusted.
Zero Trust Architecture is anchored by three primary tenets: explicit verification (continuously validating identity, device posture, and context), least privilege access (restricting access to specific resources via microsegmentation), and assuming breach (treating all network traffic as untrusted regardless of origin). Together, these mechanisms eliminate implicit perimeter trust.

Adım Adım Çözüm

1
Analyze the core principles defined by Zero Trust Architecture (such as NIST SP 800-207).
Zero Trust relies on explicit verification, least privilege, and assuming breach regardless of physical or logical network position.
Traditional perimeter security relies on implicit trust within internal subnets, whereas Zero Trust removes implicit trust completely.
2
Evaluate each option against continuous verification, least privilege, and zero implicit perimeter trust.
Continuous re-evaluation of user/device risk, microsegmentation for granular access, and inspecting all network traffic regardless of origin reflect these principles.
These three practices ensure every access request is explicitly authorized using real-time context.
3
Identify misconfigurations and legacy assumptions in the remaining options.
Granting persistent network access after initial MFA and relying solely on firewall IP filters incorrectly depend on static network boundaries and implicit trust.
Static IP rules and one-time authentication fail to validate ongoing session security or application-layer context.

Anahtar Kavram

Zero Trust Architecture Principles (Explicit Verification, Least Privilege, Assume Breach)
Bu soruyu puanla

Konular

Zero Trust Architecture Principles

Bu konudan daha fazla soru