CS0-003 · Question #461
CS0-003 Question #461: Real Exam Question with Answer & Explanation
The correct answer is A: Network segmentation to separate sensitive systems from the rest of the network.. Network segmentation supports zero-trust principles by ensuring sensitive systems are isolated and access is restricted based on identity, role, and context. Unlike traditional models, zero-trust architecture does not automatically trust authenticated users or internal network tr
Question
An organization is planning to adopt a zero-trust architecture. Which of the following is most aligned with this approach?
Options
- ANetwork segmentation to separate sensitive systems from the rest of the network.
- BWhitelisting specific IP addresses that are allowed to access the network.
- CTrusting users who successfully authenticate once with multifactor authentication.
- DAutomatically trusting internal network communications over external traffic.
Explanation
Network segmentation supports zero-trust principles by ensuring sensitive systems are isolated and access is restricted based on identity, role, and context. Unlike traditional models, zero-trust architecture does not automatically trust authenticated users or internal network traffic. It enforces strict access controls to minimize risk.
Topics
Community Discussion
No community discussion yet for this question.