CRISC · Question #514
Zero Trust architecture is designed and deployed with adherence to which of the following basic tenets?
The correct answer is D. All communication is secured regardless of network location. A core tenet of Zero Trust architecture is that all communications must be secured, regardless of whether they originate from inside or outside the traditional network perimeter. This principle assumes no inherent trust based on network location.
Question
Zero Trust architecture is designed and deployed with adherence to which of the following basic tenets?
Options
- AIncoming traffic must be inspected before connection is established.
- BSecurity frameworks and libraries should be leveraged.
- CDigital identities should be implemented.
- DAll communication is secured regardless of network location.
How the community answered
(46 responses)- A2% (1)
- B4% (2)
- D93% (43)
Why each option
A core tenet of Zero Trust architecture is that all communications must be secured, regardless of whether they originate from inside or outside the traditional network perimeter. This principle assumes no inherent trust based on network location.
While inspection is part of Zero Trust, the overarching principle is securing *all* communication, not just incoming, and continuously verifying.
Leveraging security frameworks and libraries is a good practice but not a core tenet of Zero Trust itself.
Digital identities are a crucial component for authentication in Zero Trust, but the fundamental tenet is about the security of communication irrespective of location, which identity helps achieve.
Zero Trust operates on the principle of "never trust, always verify," meaning all access requests, whether from inside or outside the network, must be authenticated, authorized, and continuously validated. Therefore, securing all communication pathways, regardless of their origin or destination within the network, is fundamental to this architecture.
Concept tested: Zero Trust architecture tenets
Source: https://learn.microsoft.com/en-us/security/zero-trust/zero-trust-overview
Topics
Community Discussion
No community discussion yet for this question.