An enterprise cloud engineering team is migrating a legacy microservices architecture to align with NIST SP 800-207 Zero Trust Architecture (ZTA) principles. The modern architecture spans hybrid cloud environments and supports both remote and on-premise users. Which of the following technical design choices directly reflect core Zero Trust Architecture principles? (Select THREE)
- Evaluating subject identity, device posture, and context dynamically to re-evaluate trust and access rights continuously throughout every sessionCevap
- Establishing microsegmentation boundaries around resources and enforcing mutual TLS (mTLS) for explicit cryptographic validation of all inter-service communicationsCevap
- Applying granular, least-privilege authorization policies tailored specifically to the individual request and target resource sensitivityCevap
- DConfiguring internal database segments as trusted networks once users successfully pass initial ingress authentication
- EDelegating resource authorization decisions entirely to perimeter firewalls while internal microservices perform user identity authentication
Cevap
The core Zero Trust principles are implemented by continuously re-evaluating trust throughout every active session, enforcing microsegmentation with explicit per-request cryptographic validation (such as mTLS), and applying strict least-privilege authorization policies per resource request.
Zero Trust Architecture operates on three key pillars: explicit validation, continuous verification, and least privilege access. Dynamically evaluating identity and context continuously across active sessions ensures posture changes revoke access immediately. Implementing microsegmentation and mTLS guarantees explicit cryptographic validation for every microservice request without relying on perimeter location. Applying granular least-privilege access ensures subjects only access the specific assets required for their authorized task.
Adım Adım Çözüm
Anahtar Kavram
Zero Trust Architecture Core Tenets (NIST SP 800-207)