Examkin

Soru

Zorluk: KolayZero Trust Architecture Principles

An organization is updating its network access controls to align with Zero Trust Architecture (ZTA) principles. Which of the following fundamental principles should the security team implement as part of this design? (Select TWO)

  1. Explicitly verify every access request using all available contextual data points including identity, location, and device state.Cevap
  2. Assume breach and continuously validate trust for all network sessions regardless of connection origin.Cevap
  3. C
    Automatically trust any network connection that originates from within the internal corporate intranet subnet.
  4. D
    Authenticate user credentials strictly once at initial login to eliminate ongoing authorization checks.
  5. E
    Rely exclusively on network perimeter firewalls to enforce internal resource isolation.

Cevap

Explicitly verify every access request using all available contextual data points, and assume breach by continuously validating trust for all network sessions regardless of connection origin.
Zero Trust Architecture requires explicit verification of every access request using contextual parameters (identity, health state, location) and operates under an 'assume breach' mindset to enforce continuous validation across all sessions.

Adım Adım Çözüm

1
Identify core Zero Trust Architecture principles.
Zero Trust is built on explicit validation, least privilege access, and assuming breach.
These core tenets establish that no user, device, or network segment is inherently trusted.
2
Evaluate the choices against Zero Trust principles.
Validating every request with identity/contextual data and treating internal traffic as potentially compromised align directly with Zero Trust requirements.
These practices remove implicit trust mechanisms found in legacy perimeter-focused security models.

Anahtar Kavram

Zero Trust Architecture Core Principles
Bu soruyu puanla

Konular

Zero Trust Architecture Principles

Bu konudan daha fazla soru