A logistics enterprise recently migrated its driver dispatch platform to a public cloud API gateway. During a post-deployment security assessment, an analyst discovers that while TLS 1.3 protects network transit, the API gateway relies exclusively on source IP address allowlisting to authorize client requests sent from drivers' mobile devices across cellular carrier networks. Which of the following architectural weaknesses represents the MOST critical security control failure in this implementation?
- Over-reliance on implicit network perimeter trust rather than continuous client identity authentication and authorization.Cevap
- BInability of TLS 1.3 to perform asymmetric key exchanges when securing mobile application REST API calls.
- CFailure to generate a unique Certificate Signing Request (CSR) for every individual driver device installation.
- DOmission of network-layer firewalls on the API gateway to mitigate host memory buffer overflow vulnerabilities in client applications.
Cevap
Over-reliance on implicit network perimeter trust rather than continuous client identity authentication and authorization is the primary security control failure.
Relying on network location or IP addresses to grant authorization across public mobile networks fails to verify client identity. In a Zero Trust context, security controls must continuously authenticate and authorize users/devices regardless of network location.
Adım Adım Çözüm
Anahtar Kavram
Perimeter Trust vs. Zero Trust Architecture Controls
Tahmini Süre:1m 30s