Examkin

Soru

Zorluk: OrtaZero Trust Architecture Principles

A cloud-native software enterprise is implementing Zero Trust Architecture (ZTA) principles across its microservices platform to prevent lateral movement following a potential system compromise. Which of the following implementation strategies best adheres to Zero Trust principles for service-to-service communication within the internal cluster?

  1. Enforcing mutual TLS with explicit workload identity verification and continuous policy authorization for every request, regardless of network segment.Cevap
  2. B
    Implicitly trusting internal traffic between backend services once an incoming request successfully authenticates at the perimeter API gateway.
  3. C
    Relying on network security group IP routing rules to grant service access while omitting per-request application authorization.
  4. D
    Deploying network intrusion prevention signatures at the cluster edge to filter malicious traffic without inspecting service context.

Cevap

Enforcing mutual TLS with explicit workload identity verification and continuous policy authorization for every request, regardless of network segment.
Zero Trust Architecture operates on the principles of assuming breach, explicitly verifying every access request, and applying least privilege. Enforcing mutual TLS with cryptographically verifiable workload identities alongside per-request authorization ensures that internal communication is authenticated and authorized dynamically regardless of physical or logical network position.

Adım Adım Çözüm

1
Analyze the core tenets of Zero Trust Architecture (ZTA).
ZTA establishes that no connection or request is inherently trusted based solely on its network location inside the perimeter.
Systems must assume breach and continuously evaluate access controls for every transaction.
2
Evaluate service-to-service communication requirements.
Each microservice interaction must authenticate identity (e.g., via mTLS x509 certificates) and evaluate dynamic authorization decisions (Policy Enforcement / Decision Points).
This prevents an attacker who compromises one service from freely moving laterally across internal microservices.

Anahtar Kavram

Zero Trust Architecture - Explicit Verification and Continuous Authentication
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Zero Trust Architecture Principles

Bu konudan daha fazla soru