An organization is transitioning from a traditional boundary firewall model to a Zero Trust Architecture (ZTA). An administrator is configuring access rules for internal workstations connected directly to the corporate office local area network. Which of the following statements best reflects a fundamental Zero Trust principle that should guide this configuration?
- Every access request must be explicitly authenticated and authorized regardless of whether it originates from inside or outside the network perimeter.Cevap
- BInternal network traffic should be implicitly trusted once a device successfully passes initial physical network access control checks.
- CAuthenticating a user identity at initial network login automatically provides full authorization to all downstream internal services.
- DAdding secondary perimeter firewalls at the network edge fulfills the continuous monitoring requirements of a Zero Trust environment.
Cevap
Every access request must be explicitly authenticated and authorized regardless of whether it originates from inside or outside the network perimeter.
The defining core principle of Zero Trust Architecture is 'never trust, always verify'. This requires every user, device, and request to be explicitly authenticated and authorized using contextual data regardless of network location.
Adım Adım Çözüm
Anahtar Kavram
Explicit Verification in Zero Trust Architecture