Examkin

Soru

Zorluk: OrtaZero Trust Architecture Principles

A logistics corporation requires remote dispatchers to complete multi-factor authentication (MFA) when initiating their daily workspace session. Once initial login is established, users maintain persistent access to centralized fleet databases for ten hours without additional context evaluations, even if their host endpoint connects to untrusted networks or exhibits degraded compliance status mid-session. Which of the following actions best aligns this environment with core Zero Trust Architecture principles?

  1. Implementing dynamic access policies that continuously evaluate user identity, device posture, and risk factors throughout the sessionCevap
  2. B
    Restricting database connections strictly to devices connected directly to the internal corporate local area network
  3. C
    Replacing software-based multi-factor authentication tokens with hardware security keys during initial session initialization
  4. D
    Deploying a network intrusion detection system to passively inspect database session traffic as a corrective security control

Cevap

Implementing dynamic access policies that continuously evaluate user identity, device posture, and risk factors throughout the session
The correct response addresses the vulnerability by enforcing continuous verification, a foundational pillar of Zero Trust Architecture (ZTA). Rather than trusting an active session indefinitely after a single login check, ZTA continuously monitors contextual attributes—such as endpoint posture, IP changes, and user behavioral risk—to enforce real-time access decisions.

Adım Adım Çözüm

1
Analyze the vulnerability described in the scenario
Identified that authentication occurs only once at session initiation, allowing unverified access for 10 hours despite potential risk posture changes.
Static, one-time authentication creates a window of implicit trust during the active session.
2
Evaluate candidate solutions against Zero Trust Architecture principles
Zero Trust requires continuous verification and explicit validation regardless of network location or initial authentication success.
Access decisions must be constantly re-evaluated based on real-time context (device health, location shifts, behavioral anomalies).
3
Select the option that eliminates implicit session trust
Dynamic policy evaluation throughout the session duration fulfills the continuous verification tenant.
It ensures access rights adjust automatically if device compliance or user risk changes.

Anahtar Kavram

Continuous Verification and Explicit Validation in Zero Trust Architecture
Bu soruyu puanla

Konular

Zero Trust Architecture Principles

Bu konudan daha fazla soru