Examkin

Soru

Zorluk: KolayZero Trust Architecture Principles

An organization is transitioning from a traditional perimeter-based security model to a Zero Trust Architecture (ZTA). Which of the following fundamental principles must the organization implement as part of this new architectural framework? (Select TWO.)

  1. Assume all network traffic is untrusted, even if originating within the internal network.Cevap
  2. Perform explicit verification for every access request using dynamic identity, context, and policy evaluation.Cevap
  3. C
    Grant full network segment access automatically once a remote user successfully authenticates through a VPN.
  4. D
    Rely on perimeter firewalls as the primary security control to prevent software-level application vulnerabilities.

Cevap

The correct principles are assuming all network traffic is untrusted regardless of origin and explicitly verifying every access request using dynamic context and policy evaluation.
Zero Trust Architecture replaces legacy boundary-based trust with two foundational tenets: assuming that network traffic is inherently untrusted regardless of source location ('assume breach'), and enforcing explicit verification on every access request using identity, context, and policy evaluation.

Adım Adım Çözüm

1
Identify the foundational trust model of Zero Trust Architecture.
Zero Trust operates under an 'assume breach' philosophy.
Internal network traffic can no longer be assumed secure simply because it originates behind a perimeter firewall.
2
Determine the required access evaluation process.
Every request must undergo explicit verification before access is granted.
Verification must continuously consider user identity, device security posture, and request context.

Anahtar Kavram

Zero Trust Core Tenets: Assume Breach and Explicit Verification
Bu soruyu puanla

Konular

Zero Trust Architecture Principles

Bu konudan daha fazla soru