ACL Zero Trust Architecture & Microsegmentation

Question 1

What is the foundational principle of Zero Trust Architecture (ZTA)?

Accepted Answer

Never trust, always verify every user and device

Answer

Zero Trust Architecture operates on the principle of 'never trust, always verify,' meaning no user, device, or network segment is trusted by default regardless of its location.

Question 2

In microsegmentation, what is the primary purpose of dividing the network into smaller zones?

Accepted Answer

To limit lateral movement of attackers within the network

Answer

Microsegmentation limits lateral movement by containing potential breaches within small segments, preventing attackers from freely traversing the network after an initial compromise.

Question 3

Which of the following best describes the role of ACLs in a Zero Trust environment?

Accepted Answer

ACLs enforce granular access controls between microsegments at the workload level

Answer

In Zero Trust, ACLs enforce granular, workload-level access controls between microsegments, ensuring only explicitly authorized traffic flows between defined zones.

Question 4

What is the concept of 'implicit trust' that Zero Trust Architecture seeks to eliminate?

Accepted Answer

The assumption that users inside the network perimeter are trustworthy

Answer

Traditional security models implicitly trust users and devices inside the network perimeter; Zero Trust eliminates this assumption by requiring verification for every access request.

Question 5

In a Zero Trust model, what does continuous validation mean?

Accepted Answer

Re-authenticating and re-authorizing users and devices throughout their session

Answer

Continuous validation means that trust is not granted once at login but is repeatedly verified throughout a session based on behavior, device posture, and contextual signals.

(ACL) Access Control Lists Practice Test

(ACL) Access Control Lists Practice Test

ACL Zero Trust Architecture & Microsegmentation