nerdexam
Isaca

CRISC · Question #523

Which of the following BEST prevents control gaps in the Zero Trust model when implementing in the environment?

The correct answer is C. Establishing a robust technical architecture. Establishing a robust technical architecture is the best way to prevent control gaps when implementing a Zero Trust model in an environment.

Submitted by katya_ua· Apr 18, 2026Risk Response and Reporting

Question

Which of the following BEST prevents control gaps in the Zero Trust model when implementing in the environment?

Options

  • ARelying on multiple solutions for Zero Trust
  • BUtilizing rapid development during implementation
  • CEstablishing a robust technical architecture
  • DStarting with a large initial scope

How the community answered

(61 responses)
  • A
    13% (8)
  • B
    3% (2)
  • C
    77% (47)
  • D
    7% (4)

Why each option

Establishing a robust technical architecture is the best way to prevent control gaps when implementing a Zero Trust model in an environment.

ARelying on multiple solutions for Zero Trust

Relying on multiple solutions without a robust integrated architecture can introduce complexity and potential gaps if not properly managed and coordinated.

BUtilizing rapid development during implementation

Utilizing rapid development during implementation might lead to rushed deployments and overlooked security considerations, increasing the likelihood of control gaps.

CEstablishing a robust technical architectureCorrect

A robust technical architecture for Zero Trust involves designing and integrating security controls across all layers and components, including identity, devices, applications, data, infrastructure, and network. This holistic design ensures that 'never trust, always verify' principles are consistently applied, minimizing potential blind spots or unaddressed areas where unauthorized access could occur.

DStarting with a large initial scope

Starting with a large initial scope without a robust architecture can overwhelm resources and lead to incomplete or poorly implemented controls, thereby creating gaps.

Concept tested: Zero Trust architecture principles

Source: https://learn.microsoft.com/en-us/security/zero-trust/zero-trust-overview

Topics

#Zero Trust#Security Architecture#Risk Mitigation#Control Gaps

Community Discussion

No community discussion yet for this question.

Full CRISC Practice