A biotechnology enterprise is updating its network security posture to protect cloud-hosted genomic research databases accessed by remote scientists. The organization intends to implement Zero Trust Architecture (ZTA) principles to replace legacy perimeter defenses. Which of the following requirements must be implemented to align with core Zero Trust tenets? (Select TWO.)
- Explicitly verify user identity, device security posture, and transaction context for every resource request, regardless of origin network location.Cevap
- BEstablish implicit trust for internal network traffic once a user successfully authenticates at the edge Virtual Private Network gateway.
- Enforce microsegmentation and dynamic access policies that restrict permissions strictly to the specific resources needed for the current task.Cevap
- DAutomatically grant full database permissions upon successful authentication, delegating access authorization to client-side scripts.
Cevap
The organization must explicitly verify user identity, device health, and context for every request regardless of location, and enforce microsegmentation with dynamic least-privilege access controls.
Zero Trust Architecture relies on the fundamental principles of explicit verification and least privilege through microsegmentation. The requirement to explicitly verify every access request evaluates user identity, device health, and context dynamically before granting entry. Concurrently, microsegmentation restricts network connectivity to micro-perimeters around specific workloads, containing potential lateral movement.
Adım Adım Çözüm
Anahtar Kavram
Zero Trust Architecture Principles
Tahmini Süre:1m 30s