During an internal security assessment, an analyst discovers that an enterprise host permits unauthenticated administrative connections from any device within the internal network. The system design relies entirely on the border edge firewall to block external threats, assuming all intranet traffic is inherently safe. Which of the following architecture vulnerabilities is primarily demonstrated by this scenario?
- Implicit reliance on perimeter-based defense rather than implementing zero trust continuous verification.Cevap
- BMisclassification of a preventive security control as a compensating administrative control.
- CVulnerability to SQL injection payloads executing malicious scripts within the client web browser.
- DApplying network layer packet filtering firewalls to remediate host-based software buffer overflows.
Cevap
Implicit reliance on perimeter-based defense rather than implementing zero trust continuous verification.
The system architecture assumes internal traffic is trustworthy simply because it originates behind the edge firewall. This implicit trust reliance leaves internal systems exposed to lateral movement if an attacker breaches the perimeter. Zero Trust principles mandate explicit authentication and microsegmentation regardless of network location.
Adım Adım Çözüm
Anahtar Kavram
Perimeter Trust vs. Zero Trust Architecture Vulnerabilities