An aerospace engineering firm hosts sensitive CAD schematics on an internal server. Previously, any workstation connected to the internal corporate LAN was implicitly trusted and allowed access to the repository after a single initial morning domain login. To align this environment with Zero Trust Architecture (ZTA) principles, which strategy should the security team implement?
- Enforce explicit authentication and contextual authorization for every access request to the schematics repository, regardless of the user's network location.Cevap
- BStrengthen perimeter firewalls and internal subnet access control lists so all network traffic originating within the corporate LAN remains implicitly trusted.
- CRequire multi-factor authentication during the user's initial login session and grant persistent authorization to internal repository resources for the remainder of the workday.
- DReclassify passive perimeter intrusion detection sensors into active preventive controls to automatically block unapproved internal network segments.
Cevap
Enforce explicit authentication and contextual authorization for every access request to the schematics repository, regardless of the user's network location.
Zero Trust Architecture mandates that no network, user, or device is inherently trusted based on physical location or network placement. Enforcing continuous verification through explicit authentication and contextual authorization for every request directly fulfills ZTA principles.
Adım Adım Çözüm
Anahtar Kavram
Zero Trust Architecture Principles - Explicit Verification and Continuous Assessment