Examkin

Soru

Zorluk: ZorZero Trust Architecture Principles

An aerospace engineering organization has implemented Zero Trust Architecture (ZTA) controls for engineers accessing proprietary CAD schematics stored in a hybrid cloud repository. During an active remote session from a corporate laptop, the security monitoring system detects that the local endpoint protection agent was disabled and the asset's dynamic risk score surged. Although the engineer successfully completed multi-factor authentication (MFA) at session initiation, access to the repository is revoked instantly. Which Zero Trust Architecture core principle is directly demonstrated by this access enforcement action?

  1. Continuous verification and dynamic risk assessment throughout the session lifecycleCevap
  2. B
    Implicit trust placement within internal subnets once multi-factor authentication is validated
  3. C
    Perimeter-based identity authorization with static role assignments for corporate assets
  4. D
    Network-level compensating controls enforced at the boundary firewall following identity assertion

Cevap

Continuous verification and dynamic risk assessment throughout the session lifecycle
The scenario demonstrates immediate access termination when a client device's security posture degrades mid-session. Under Zero Trust Architecture principles, explicit verification must occur continuously rather than once at initial authentication. Policy Decision Points (PDPs) evaluate real-time contextual signals—such as endpoint health, user risk score, and system compliance—to adjust or revoke access dynamically throughout the connection lifecycle.

Adım Adım Çözüm

1
Analyze the access control trigger and response described in the scenario.
Access was granted following MFA, but was dynamically terminated mid-session due to host security posture degradation (disabled protection agent and spiked risk score).
Understanding why access was altered mid-session identifies the specific operational policy logic.
2
Evaluate the action against Zero Trust Architecture principles.
Zero Trust dictates that authentication and authorization are never static events; Policy Decision Points (PDPs) must continuously re-evaluate sessions using dynamic context and real-time security signals.
This contrasts with legacy security architectures that assume trusted status after initial authentication.
3
Select the option that accurately describes this architectural behavior.
The concept of continuous verification and dynamic risk assessment throughout the session lifecycle correctly describes immediate revocation upon host posture decay.
It explicitly captures the core ZTA tenet of continuous re-assessment without relying on implicit, persistent session trust.

Anahtar Kavram

Continuous Verification and Dynamic Context-Based Access Control
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Zero Trust Architecture Principles

Bu konudan daha fazla soru