Examkin

Soru

Zorluk: KolayZero Trust Architecture Principles

A system administrator is updating an enterprise security policy to align with core Zero Trust Architecture (ZTA) principles. Which of the following practices represent core tenets of Zero Trust? (Select TWO.)

  1. Explicitly verify identity, device health, and context for every access requestCevap
  2. Enforce least privilege access by restricting user permissions to only what is necessary for specific tasksCevap
  3. C
    Implicitly trust all network traffic that originates from inside the corporate internal network perimeter
  4. D
    Grant unrestricted resource permissions to accounts after successful initial multi-factor authentication

Cevap

The core tenets of Zero Trust Architecture include explicitly verifying every access request and enforcing least privilege access controls.
Zero Trust Architecture enforces continuous explicit verification for all access requests and limits user rights through least privilege access policies to minimize risk.

Adım Adım Çözüm

1
Identify core Zero Trust Architecture tenets
Zero Trust is built on the philosophy of 'never trust, always verify', assuming that threats exist both outside and inside the network.
Traditional perimeter defenses rely on implicit trust, which Zero Trust explicitly replaces with continuous verification.
2
Evaluate the requirement for verification
Explicit verification mandates that all requests are authenticated, authorized, and validated based on user identity, location, device health, and data classification.
This prevents unauthorized movement even if an attacker gains entry to the network.
3
Evaluate the requirement for access restriction
Least privilege access limits user access with Just-In-Time (JIT) and Just-Enough-Access (JEA) policies.
Restricting access reduces the blast radius in the event of a credential compromise.

Anahtar Kavram

Zero Trust Architecture Principles
Bu soruyu puanla

Konular

Zero Trust Architecture Principles

Bu konudan daha fazla soru