nerdexam
Isaca

CRISC · Question #514

Zero Trust architecture is designed and deployed with adherence to which of the following basic tenets?

The correct answer is D. All communication is secured regardless of network location. A core tenet of Zero Trust architecture is that all communications must be secured, regardless of whether they originate from inside or outside the traditional network perimeter. This principle assumes no inherent trust based on network location.

Submitted by jaden.t· Apr 18, 2026Information Technology and Security

Question

Zero Trust architecture is designed and deployed with adherence to which of the following basic tenets?

Options

  • AIncoming traffic must be inspected before connection is established.
  • BSecurity frameworks and libraries should be leveraged.
  • CDigital identities should be implemented.
  • DAll communication is secured regardless of network location.

How the community answered

(46 responses)
  • A
    2% (1)
  • B
    4% (2)
  • D
    93% (43)

Why each option

A core tenet of Zero Trust architecture is that all communications must be secured, regardless of whether they originate from inside or outside the traditional network perimeter. This principle assumes no inherent trust based on network location.

AIncoming traffic must be inspected before connection is established.

While inspection is part of Zero Trust, the overarching principle is securing *all* communication, not just incoming, and continuously verifying.

BSecurity frameworks and libraries should be leveraged.

Leveraging security frameworks and libraries is a good practice but not a core tenet of Zero Trust itself.

CDigital identities should be implemented.

Digital identities are a crucial component for authentication in Zero Trust, but the fundamental tenet is about the security of communication irrespective of location, which identity helps achieve.

DAll communication is secured regardless of network location.Correct

Zero Trust operates on the principle of "never trust, always verify," meaning all access requests, whether from inside or outside the network, must be authenticated, authorized, and continuously validated. Therefore, securing all communication pathways, regardless of their origin or destination within the network, is fundamental to this architecture.

Concept tested: Zero Trust architecture tenets

Source: https://learn.microsoft.com/en-us/security/zero-trust/zero-trust-overview

Topics

#Zero Trust#Security Architecture#Network Security#Security Principles

Community Discussion

No community discussion yet for this question.

Full CRISC Practice