350-201 Question 3
Single answerYou are a cybersecurity analyst tasked with implementing a zero-trust security model in your organization. As part of the initial step, you need to ensure proper segmentation and control of network traffic. Which fundamental concept of Cisco Security Technologies would be MOST crucial for achieving this goal?
- A
Micro-segmentation using Cisco TrustSec
- B
Cisco Secure Email Gateway configuration
- C
Deploying endpoint protection with Cisco AMP for Endpoints
- D
Monitoring network traffic using Cisco Stealthwatch
Show answer and explanation
Correct answer: A
Explanation
Zero-trust security relies heavily on network segmentation and strict access controls. Cisco TrustSec is a foundational technology for achieving micro-segmentation, which is a critical component of zero trust. It ensures that network traffic is controlled and authorized based on identity policies, aligning with the zero-trust principles.
- A. Correct.
Micro-segmentation using Cisco TrustSec is a fundamental approach in implementing a zero-trust model by segmenting the network and enforcing access policies based on identity, ensuring only authorized traffic flows.
- B. Incorrect.
Cisco Secure Email Gateway is focused on email security, which is not directly related to network segmentation or the zero-trust model.
- C. Incorrect.
Deploying endpoint protection with Cisco AMP for Endpoints is valuable for endpoint security but does not address network segmentation or the enforcement of a zero-trust model.
- D. Incorrect.
Monitoring network traffic using Cisco Stealthwatch helps with detecting and responding to threats but does not enforce segmentation or directly implement the zero-trust model.