A biomedical research firm is implementing Zero Trust Architecture (ZTA) principles to secure sensitive genomic research data stored in a hybrid environment. An analyst attempts to access a restricted database from a corporate laptop while connected from a remote partner facility. Which of the following describes how access is evaluated under Zero Trust principles?
- Access is dynamically evaluated by a Policy Decision Point (PDP) using contextual telemetry such as device health, user identity, and location before instructing a Policy Enforcement Point (PEP) to grant explicit access.Cevap
- BAccess is automatically granted because the analyst connects through an authenticated enterprise Virtual Private Network (VPN) tunnel.
- CUser authentication at initial device login automatically grants authorization to all database resources assigned to the analyst's role without additional policy evaluation.
- DStatic perimeter firewall rules permit connection requests based on the IP address range assigned to the authorized remote partner facility.
Cevap
Access is dynamically evaluated by a Policy Decision Point (PDP) using contextual telemetry such as device health, user identity, and location before instructing a Policy Enforcement Point (PEP) to grant explicit access.
Under Zero Trust Architecture (ZTA), no implicit trust is granted based on network location or initial login. Access requests must be explicitly verified. A Policy Decision Point (PDP) dynamically evaluates telemetry (such as user identity, device posture, and location context) against policy rules to determine access, which is then enforced by a Policy Enforcement Point (PEP).
Adım Adım Çözüm
Anahtar Kavram
Explicit Verification and PDP/PEP Decoupling in Zero Trust Architecture