In which step of the Five-Step Methodology for implementing the Zero Trust model does inspection and logging of all traffic take place?

Question

Options

• AStep 4: Create the Zero Trust policy
• BStep 3: Architect a Zero Trust network
• CStep 1: Define the protect surface
• DStep 5: Monitor and maintain the network

• A
  8% (3)
• B
  3% (1)
• C
  3% (1)
• D
  86% (32)

Explanation

Step 5: Monitor and maintain the network is correct because ongoing inspection and logging of all traffic is an operational activity - it happens continuously after the Zero Trust architecture is built and policies are in place, making it a monitoring and maintenance function by definition.

• Step 1 (Define the protect surface) is about identifying what needs protection - data, assets, applications, and services - not observing traffic.
• Step 3 (Architect a Zero Trust network) focuses on designing the network around the protect surface, not monitoring it.
• Step 4 (Create the Zero Trust policy) is about defining the rules that govern access, not executing or logging them.

Memory tip: Think of the five steps as a lifecycle - you can't watch what you haven't yet built and governed. Monitoring always comes last because you need something to monitor; Step 5 is where Zero Trust moves from design into continuous operation.

No community discussion yet for this question.