ACL Zero Trust Architecture & Microsegmentation 1 — Questions and Answers
Question 1: What is the foundational principle of Zero Trust Architecture (ZTA)?
- Trust all internal network traffic by default
- Never trust, always verify every user and device (Correct answer)
- Trust users once they pass perimeter authentication
- Grant access based on network location alone
Correct answer: Never trust, always verify every user and device
Zero Trust Architecture operates on the principle of 'never trust, always verify,' meaning no user, device, or network segment is trusted by default regardless of its location.
Question 2: In microsegmentation, what is the primary purpose of dividing the network into smaller zones?
- To reduce hardware costs by consolidating switches
- To limit lateral movement of attackers within the network (Correct answer)
- To simplify network administration and management
- To increase overall network throughput and speed
Correct answer: To limit lateral movement of attackers within the network
Microsegmentation limits lateral movement by containing potential breaches within small segments, preventing attackers from freely traversing the network after an initial compromise.
Question 3: Which of the following best describes the role of ACLs in a Zero Trust environment?
- ACLs are replaced entirely by firewall rules in Zero Trust
- ACLs enforce granular access controls between microsegments at the workload level (Correct answer)
- ACLs only control external perimeter access in Zero Trust
- ACLs are unnecessary once identity-based controls are implemented
Correct answer: ACLs enforce granular access controls between microsegments at the workload level
In Zero Trust, ACLs enforce granular, workload-level access controls between microsegments, ensuring only explicitly authorized traffic flows between defined zones.
Question 4: What is the concept of 'implicit trust' that Zero Trust Architecture seeks to eliminate?
- The assumption that encrypted traffic is always safe
- The assumption that users inside the network perimeter are trustworthy (Correct answer)
- The assumption that multi-factor authentication prevents all breaches
- The assumption that public-key infrastructure ensures data integrity
Correct answer: The assumption that users inside the network perimeter are trustworthy
Traditional security models implicitly trust users and devices inside the network perimeter; Zero Trust eliminates this assumption by requiring verification for every access request.
Question 5: In a Zero Trust model, what does continuous validation mean?
- Running antivirus scans on all devices every hour
- Re-authenticating and re-authorizing users and devices throughout their session (Correct answer)
- Validating SSL certificates at session initiation only
- Continuously updating firewall rule sets with new threat intelligence
Correct answer: Re-authenticating and re-authorizing users and devices throughout their session
Continuous validation means that trust is not granted once at login but is repeatedly verified throughout a session based on behavior, device posture, and contextual signals.
Question 6: Which technology is most commonly used to implement microsegmentation in modern data centers?
- Hardware-based VLANs and physical firewall appliances
- Software-defined networking (SDN) and virtual firewalls (Correct answer)
- Network address translation (NAT) and proxy servers
- Intrusion detection systems (IDS) and honeypots
Correct answer: Software-defined networking (SDN) and virtual firewalls
Software-defined networking and virtual firewalls enable dynamic, policy-driven microsegmentation that can be applied at the individual workload level without physical hardware changes.
Question 7: What is the 'least privilege access' principle as applied in Zero Trust Architecture?
- Users are granted access to all resources but logged for audit purposes
- Users and systems receive only the minimum access required for their specific tasks (Correct answer)
- Privileged accounts are disabled and replaced with shared admin accounts
- All users receive the same base level of access to prevent discrimination
Correct answer: Users and systems receive only the minimum access required for their specific tasks
Least privilege access ensures that users and systems can only access resources necessary for their specific role or task, reducing the attack surface and limiting damage from compromised accounts.
ACL Zero Trust Architecture & Microsegmentation 1
What is the foundational principle of Zero Trust Architecture (ZTA)?