Examkin

Soru

Zorluk: KolayZero Trust Architecture Principles

A security administrator is drafting baseline policies to align the enterprise network with Zero Trust Architecture (ZTA) principles. Which of the following fundamental tenets should be included in these guidelines? (Select TWO.)

  1. Explicitly verify the identity, context, and security posture of every access request regardless of user location.Cevap
  2. B
    Automatically grant full trust to internal network traffic once a device successfully passes perimeter firewall authentication.
  3. Enforce least privilege access by restricting user permissions to only the specific resources required for their role.Cevap
  4. D
    Bypass continuous access monitoring after initial single sign-on (SSO) login to optimize network bandwidth.

Cevap

The correct answers are the principles of explicit verification of all requests and enforcing least privilege access.
Zero Trust Architecture operates on the core philosophy of 'Never Trust, Always Verify'. This entails explicitly authenticating and authorizing every request regardless of origin, and applying least privilege access controls to limit potential damage from compromised accounts or assets.

Adım Adım Çözüm

1
Identify core Zero Trust Architecture (ZTA) principles.
ZTA relies on foundational tenets including 'Never Trust, Always Verify', explicit verification, least privilege, and assumed breach.
Establishing accurate baseline policies requires distinguishing Zero Trust tenets from legacy perimeter defenses.
2
Evaluate the option regarding explicit verification.
Verifying identity, device posture, and context for all access requests regardless of location directly reflects the 'Explicitly Verify' tenet.
Zero Trust eliminates implicit trust based on network location.
3
Evaluate the option regarding least privilege access.
Restricting permissions to only necessary resources directly aligns with the 'Least Privilege' tenet.
Limiting access reduces the blast radius of potential security compromises.

Anahtar Kavram

Core Tenets of Zero Trust Architecture
Bu soruyu puanla

Konular

Zero Trust Architecture Principles

Bu konudan daha fazla soru