350-201 Question 2
Select 3A cybersecurity administrator is tasked with implementing a Zero Trust architecture in their network environment. As part of the initial steps, they need to identify the key principles of the Zero Trust model to ensure proper implementation. Which of the following are core principles of the Zero Trust framework?
- A
Always trust devices that are part of the internal network
- B
Verify explicitly by using strong authentication methods
- C
Assume breach and design defenses accordingly
- D
Enforce least privilege access for users and devices
- E
Allow unrestricted access to critical systems for faster troubleshooting
Show answer and explanation
Correct answers: B, C, D
Explanation
The Zero Trust model is built on the principles of 'never trust, always verify,' assuming breach, and enforcing least privilege access to minimize security risks. These principles collectively ensure that security is maintained regardless of whether resources are inside or outside the traditional network perimeter.
- A. Incorrect.
This option is incorrect because the Zero Trust model operates on the principle of 'never trust, always verify,' even for devices within the internal network.
- B. Correct.
This option is correct as verifying explicitly, often through strong authentication and authorization, is a core principle of Zero Trust.
- C. Correct.
This option is correct because assuming breach and preparing defenses accordingly is fundamental to the Zero Trust framework to mitigate risks effectively.
- D. Correct.
This option is correct as enforcing least privilege ensures that users and devices only have access to the resources they need, reducing the attack surface.
- E. Incorrect.
This option is incorrect since unrestricted access contradicts Zero Trust principles, which emphasize controlled and monitored access to critical systems.