nerdexam
EC-Council

312-50V13 · Question #619

You are a cloud security expert at CloudGuard Inc. working with a client who plans to transition their infrastructure to a public cloud. The client expresses concern about potential data breaches…

The correct answer is A. It operates on the principle of least privilege, verifying each request as if it is from an untrusted. The Zero Trust model enhances cloud security by operating on the principle of "never trust, always verify," meaning every access request is authenticated and authorized based on least privilege, regardless of its origin.

Submitted by ngozi_ng· Mar 6, 2026Cloud Computing

Question

You are a cloud security expert at CloudGuard Inc. working with a client who plans to transition their infrastructure to a public cloud. The client expresses concern about potential data breaches and wants to ensure that only authorized personnel can access certain sensitive resources. You propose implementing a Zero Trust security model. Which of the following best describes how the Zero Trust model would enhance the security of their cloud resources?

Options

  • AIt operates on the principle of least privilege, verifying each request as if it is from an untrusted
  • BIt encrypts all data stored in the cloud, ensuring only authorized users can decrypt it.
  • CIt uses multi-factor authentication for all user accounts.
  • DIt ensures secure data transmission by implementing SSL/TLS protocols.

How the community answered

(70 responses)
  • A
    89% (62)
  • B
    6% (4)
  • C
    1% (1)
  • D
    4% (3)

Why each option

The Zero Trust model enhances cloud security by operating on the principle of "never trust, always verify," meaning every access request is authenticated and authorized based on least privilege, regardless of its origin.

AIt operates on the principle of least privilege, verifying each request as if it is from an untrustedCorrect

The Zero Trust security model assumes no implicit trust is granted to any user or device, whether inside or outside the network perimeter. It mandates that all access attempts to resources, including cloud resources, are continuously authenticated, authorized, and validated based on dynamic policies, user identity, device health, and the principle of least privilege. This continuous verification process significantly reduces the risk of unauthorized access and data breaches by limiting access only to what is absolutely necessary.

BIt encrypts all data stored in the cloud, ensuring only authorized users can decrypt it.

While encrypting all data stored in the cloud is a crucial security measure, it is a component of data protection, not the overarching principle of how Zero Trust verifies and authorizes access requests.

CIt uses multi-factor authentication for all user accounts.

Using multi-factor authentication (MFA) is a strong authentication method and a *component* of a Zero Trust strategy, but it does not fully encompass the entire "never trust, always verify" philosophy that applies to all access, authorization, and least privilege.

DIt ensures secure data transmission by implementing SSL/TLS protocols.

Implementing SSL/TLS protocols ensures secure data transmission in transit, which is a necessary security measure but not the defining characteristic or primary enhancement offered by a Zero Trust model's approach to access control.

Concept tested: Zero Trust model principles

Source: https://learn.microsoft.com/en-us/security/zero-trust/zero-trust-overview

Topics

#Zero Trust#cloud security#least privilege#access control

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 312-50V13 Practice