nerdexam
EC-Council

312-50V12 · Question #233

You are a cloud security expert at CloudGuard Inc. working with a client who plans to transition their infrastructure to a public cloud. The client expresses concern about potential data breaches and

The correct answer is A. It operates on the principle of least privilege, verifying each request as if it is from an untrusted. The Zero Trust security model enhances cloud resource security by adopting a "never trust, always verify" approach, enforcing strict authentication and authorization for all access requests.

Submitted by anjalisingh· Mar 4, 2026Cloud Computing

Question

You are a cloud security expert at CloudGuard Inc. working with a client who plans to transition their infrastructure to a public cloud. The client expresses concern about potential data breaches and wants to ensure that only authorized personnel can access certain sensitive resources. You propose implementing a Zero Trust security model. Which of the following best describes how the Zero Trust model would enhance the security of their cloud resources?

Options

  • AIt operates on the principle of least privilege, verifying each request as if it is from an untrusted
  • BIt encrypts all data stored in the cloud, ensuring only authorized users can decrypt it.
  • CIt uses multi-factor authentication for all user accounts.
  • DIt ensures secure data transmission by implementing SSL/TLS protocols.

How the community answered

(24 responses)
  • A
    96% (23)
  • B
    4% (1)

Why each option

The Zero Trust security model enhances cloud resource security by adopting a "never trust, always verify" approach, enforcing strict authentication and authorization for all access requests.

AIt operates on the principle of least privilege, verifying each request as if it is from an untrustedCorrect

The Zero Trust security model fundamentally operates on the principle of "never trust, always verify," meaning every access request, regardless of its origin inside or outside the network perimeter, is authenticated, authorized, and continuously validated. It strictly enforces least privilege access, ensuring users and devices only have the minimum permissions necessary for their specific tasks, thereby significantly reducing the attack surface and potential for data breaches.

BIt encrypts all data stored in the cloud, ensuring only authorized users can decrypt it.

While data encryption is a critical security measure for data at rest, it is a data protection technique rather than the overarching operational principle of the Zero Trust model itself, which focuses on access verification and authorization.

CIt uses multi-factor authentication for all user accounts.

Multi-factor authentication (MFA) is a vital component and strong recommendation within a Zero Trust architecture for identity verification, but it represents only one aspect of the broader Zero Trust model's continuous verification and authorization framework.

DIt ensures secure data transmission by implementing SSL/TLS protocols.

Implementing SSL/TLS protocols ensures secure data transmission, which is a fundamental network security practice; however, Zero Trust extends beyond secure transport to how access decisions are made and continuously enforced for all resources, regardless of network location.

Concept tested: Zero Trust security model principles

Source: https://learn.microsoft.com/en-us/security/zero-trust/zero-trust-overview

Topics

#Zero Trust#Cloud security#Least privilege#Access control

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 312-50V12 Practice