PCCET · Question #220
Which capability of a Zero Trust network security architecture leverages the combination of application, user, and content identification to prevent unauthorized access?
The correct answer is C. Least privileges access control. Least privileges access control is the capability of a Zero Trust network security architecture that leverages the combination of application, user, and content identification to prevent unauthorized access. Least privileges access control means that users and devices are only…
Question
Which capability of a Zero Trust network security architecture leverages the combination of application, user, and content identification to prevent unauthorized access?
Options
- ACyber threat protection
- BInspection of all traffic
- CLeast privileges access control
- DNetwork segmentation
How the community answered
(49 responses)- A2% (1)
- B2% (1)
- C92% (45)
- D4% (2)
Explanation
Least privileges access control is the capability of a Zero Trust network security architecture that leverages the combination of application, user, and content identification to prevent unauthorized access. Least privileges access control means that users and devices are only granted the permissions they need to perform their tasks, and nothing more. This helps reduce the attack surface and makes it more difficult for attackers to gain access to sensitive data or resources. Least privileges access control is based on the principle of Zero Trust, which assumes that there are attackers both within and outside of the network, so no users or devices should be automatically trusted. Zero Trust verifies user identity and privileges as well as device identity and security, and requires end-to-end encryption. Least privileges access control also involves careful management of user permissions and network segmentation, which limit the amount of information and length of time people can access something, and contain the damage if someone does get unauthorized access.
Topics
Community Discussion
No community discussion yet for this question.