ACL Zero Trust Architecture & Microsegmentation

Question 1

What is the foundational principle of Zero Trust Architecture (ZTA)?

Accepted Answer

Never trust, always verify every user and device

Answer

Trust all internal network traffic by default

Answer

Trust users once they pass perimeter authentication

Answer

Grant access based on network location alone

Question 2

In microsegmentation, what is the primary purpose of dividing the network into smaller zones?

Accepted Answer

To limit lateral movement of attackers within the network

Answer

To reduce hardware costs by consolidating switches

Answer

To simplify network administration and management

Answer

To increase overall network throughput and speed

Question 3

Which of the following best describes the role of ACLs in a Zero Trust environment?

Accepted Answer

ACLs enforce granular access controls between microsegments at the workload level

Answer

ACLs are replaced entirely by firewall rules in Zero Trust

Answer

ACLs only control external perimeter access in Zero Trust

Answer

ACLs are unnecessary once identity-based controls are implemented

Question 4

What is the concept of 'implicit trust' that Zero Trust Architecture seeks to eliminate?

Accepted Answer

The assumption that users inside the network perimeter are trustworthy

Answer

The assumption that encrypted traffic is always safe

Answer

The assumption that multi-factor authentication prevents all breaches

Answer

The assumption that public-key infrastructure ensures data integrity

Question 5

In a Zero Trust model, what does continuous validation mean?

Accepted Answer

Re-authenticating and re-authorizing users and devices throughout their session

Answer

Running antivirus scans on all devices every hour

Answer

Validating SSL certificates at session initiation only

Answer

Continuously updating firewall rule sets with new threat intelligence

Question 6

Which technology is most commonly used to implement microsegmentation in modern data centers?

Accepted Answer

Software-defined networking (SDN) and virtual firewalls

Answer

Hardware-based VLANs and physical firewall appliances

Answer

Network address translation (NAT) and proxy servers

Answer

Intrusion detection systems (IDS) and honeypots

Question 7

What is the 'least privilege access' principle as applied in Zero Trust Architecture?

Accepted Answer

Users and systems receive only the minimum access required for their specific tasks

Answer

Users are granted access to all resources but logged for audit purposes

Answer

Privileged accounts are disabled and replaced with shared admin accounts

Answer

All users receive the same base level of access to prevent discrimination