Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

CCZT > Introduction to ZTA - Benefits of ZT > Flashcards

Introduction to ZTA - Benefits of ZT Flashcards

(71 cards)

Start Studying
1
Q

What are the benefits of Zero Trust

A
  1. Reduced Risk of Compromise
  2. Increased Trustworthiness of Access
  3. Increased Visibility and Analytics
  4. Improved Compliance
    - and additional benefits
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q
A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is one of the main benefits of Zero Trust (ZT)?

A

Reduces risk of compromise

This is achieved by reducing the attack surface, limiting the radius of impact, and decreasing the time to detect and contain breaches.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What principle is at the core of reducing the attack surface?

A

Principle of least privilege and ‘never trust, always verify’

These principles dictate that resources are accessed based on various attributes and context.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

How does Zero Trust Architecture (ZTA) implement resource hiding?

A

Resources are only visible to authenticated, authorized users

This concept varies depending on the ZTA implementation technique.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is the role of the Policy Enforcement Point (PEP) in ZTA?

A

Forwards requests to the Policy Decision Point (PDP) for authorization

The PEP checks if the user has been authenticated and authorized by policy.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What does the PDP do after receiving a request from the PEP?

A

Checks if the user has been authenticated and authorized by policy

The PDP then sends its response back to the PEP.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is the goal of using vetted, compartmentalized applications in ZTA?

A

To protect applications from potentially compromised hosts

This involves running only approved applications in a sandboxed environment.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is micro-segmentation in the context of Zero Trust?

A

Restricts lateral movement inside an enterprise IT environment

Each access attempt is authenticated and authorized, regardless of origin.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

How does ZTA improve the detection of breaches?

A

Centralized authentication and policy enforcement increases visibility

This visibility helps in detecting malicious access attempts in real-time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What kinds of threats can ZTA help detect early?

A
  • Phishing attempts
  • Privilege elevation
  • Use of stolen credentials

Early detection can stop attackers from launching successful intrusions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Fill in the blank: The PEP will refuse requests from _______.

A

[other applications running on the server]

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

True or False: ZTA allows unrestricted access to resources regardless of authentication.

A

False

Access is always authenticated and authorized.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is the significance of dynamic access policies in ZTA?

A

Enables organizations to detect malicious access attempts in real-time

This capability helps in mitigating attacks before they cause damage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What does ZTA stand for?

A

Zero Trust Architecture

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is the fundamental capability of ZTA regarding identity access management?

A

Consolidated identity access management (IAM) and policy solutions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is the principle of least privilege in ZTA?

A

Access to resources is based on the principles of least privilege and need to know

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What are some methods used in ZTA to increase trustworthiness of access?

A

Single Packet Authorization (SPA)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What security measures are enforced before access is granted in ZTA?

A

Strong authentication, including MFA, session timeouts, re-authentication requests, and validation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Fill in the blank: Access to any data in ZTA is protected _______ based on its sensitivity.

A

cryptographically

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is the role of Multi-Factor Authentication (MFA) in ZTA?

A

To enforce strong authentication before access is granted

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

List two benefits of implementing ZTA.

A
  • Granular access and permissions
  • Continuous validation of identity, authentication, and authorization to resources
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

True or False: In ZTA, user authentication is decentralized.

A

False

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What happens to the first SPA packet sent by the client?

A

It is rejected

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
How does the server respond if the SPA packet is successfully authenticated?
Creates an explicit policy to expose the service to the requesting endpoint
26
What is the relationship between the Policy Enforcement Point (PEP) and the Policy Decision Point (PDP) in ZTA?
PEP enforces the IAM policy of least privilege and communicates with PDP
27
What does NIST SP 800-207 describe regarding ZTA?
Enhanced identity governance approach establishing enterprise resource access policies based on identity and assigned attributes
28
What is the process for user authentication in ZTA?
User authenticates to the device, device authenticates to the network, and access request is sent to the policy engine
29
In an IEEE 802.1x implementation, what do corporate laptops have installed?
Agents
30
What is the purpose of the access request vetting process in ZTA?
To ensure the user is verified as part of the appropriate group
31
Fill in the blank: Access control in ZTA is based on _______ and attributes.
roles
32
What technology is mentioned as part of the network access control in ZTA?
Lightweight Directory Access Protocol (LDAP)
33
What is the purpose of continuous validation in ZTA?
To ensure ongoing compliance with access policies
34
What is a requirement of ZTA regarding logging and monitoring?
ZTA requires logging, monitoring, and alerting capabilities for increased visibility into users’ activity.
35
What should be logged and monitored in ZTA?
Attempts to access privileged resources, administrative or root account activity.
36
What is the purpose of anomaly detection in ZTA?
To detect suspicious patterns in both inbound and outbound traffic.
37
What can be automated in ZTA for improved response and remediation?
Alert notifications and automatic task assignments.
38
List the visibility and analytics-related improvements of ZTA.
* Granular logging and monitoring * Monitoring analytics over user entities behavior * Network isolation and micro-segmentation * Continuous monitoring across all attack surfaces * Minimization of data exfiltration * Continuous device posture assessment
39
How do IAM policies function in CSA’s SDP?
IAM policies are enforced when access requests are made to a device or host.
40
What does the DOD ZT Reference Architecture model outline?
It outlines a model for logging, analytics, and automation.
41
What is the first step in the DOD ZT Reference Architecture for analytics?
Historical user behavioral data and current user actions are sent to the analytics engine to be analyzed.
42
What is compared against global baselines in the DOD ZT Reference Architecture?
A user’s historical and current actions/behaviors.
43
What does the analysis in the DOD ZT Reference Architecture result in?
A confidence score based on the user’s behavior.
44
What dictates the level of access a user receives in ZTA?
The user's confidence score and historical behavior patterns.
45
What happens if a user's actions drop their confidence score below a threshold?
Access to a resource is denied.
46
True or False: Continuous monitoring and analysis occur in the background in ZTA.
True.
47
What is the purpose of logging all actions to a SIEM platform?
To process them by the analytics engine and hand them to a SOAR platform for real-time policy access decisions.
48
Fill in the blank: ZTA minimizes _______.
[data exfiltration]
49
What type of monitoring is involved in ZTA?
Continuous monitoring across all attack surfaces.
50
What is the significance of user entity behavior analytics in ZTA?
It leads to more detailed security analytics, making it easier to detect breaches or anomalous behavior.
51
What is evaluated during the setup of mTLS sessions?
Device posture.
52
What does NIST SP 800-207 specify about ZTA?
It enables the enterprise to observe all network traffic.
53
What should the enterprise record according to NIST SP 800-207?
Packets seen on the data plane.
54
What type of metadata is filtered out in ZTA?
Metadata about the connection such as destination, time, and device identity.
55
What is one way ZTA improves an organization’s compliance posture?
By requiring frequent reviews of access policies to align with evolving IT environments. ## Footnote This ensures that security measures remain relevant and effective.
56
Why are policies important in ZTA for security governance?
They translate organizational goals and objectives into actionable security rules. ## Footnote Policies help in holding organizations accountable to shareholders and stakeholders.
57
How are access control policies managed in a ZT approach?
They are carefully enforced, continuously monitored, and frequently updated. ## Footnote This dynamic management helps maintain compliance with external and internal requirements.
58
What role does continuous monitoring play in policy management?
It enables alignment of policy definitions with enforcement measures. ## Footnote This is crucial for implementing controls for continuous auditing and compliance.
59
What is micro-segmentation in the context of ZTA?
A strategy that applies access controls to individual resources using fine-grained authorization mechanisms. ## Footnote It evaluates the requester’s trustworthiness before granting access.
60
What principles do organizations implement to reduce their attack surface?
Need to know and least privilege principles. ## Footnote These principles limit user/device access to sensitive data.
61
How does limiting access based on location affect compliance measures?
It reduces the scope of compliance measures like PCI-DSS or GDPR. ## Footnote Fewer users/devices with access to sensitive data lowers potential liability.
62
True or False: Continuous monitoring is not important for effective policy management in ZTA.
False. ## Footnote Continuous monitoring is critical for effective policy management.
63
Fill in the blank: ZTA requires organizations to frequently review _______ to ensure compliance.
access policies. ## Footnote This is essential as the IT environment evolves.
64
What can a ZT approach help organizations identify?
Business processes, data flows, users, data, and associated risks ## Footnote These insights are crucial for reducing risk in cloud and container deployments.
65
How does a well-architected ZTA benefit IT complexity?
Reduces IT complexity while supporting resiliency and defense-in-depth ## Footnote This is essential for maintaining a robust security posture.
66
What are some security benefits of a ZT security framework?
Numerous advantages that vary by organizational landscape, architecture, and operating model ## Footnote Benefits include better governance and compliance.
67
How does utilizing cloud technologies in a ZT framework affect operational costs?
Helps minimize ongoing operational costs and eases the burden on human resources and staffing ## Footnote Automation is key in achieving these efficiencies.
68
What does the ZT model provide in terms of access control?
Unified access control to data, services, applications, and infrastructure ## Footnote This approach counters major threats more effectively.
69
What is the benefit of unifying an organization’s access controls in a ZT model?
Reduces security costs while improving efficacy, visibility, manageability, and user experience ## Footnote This is more efficient than using a combination of tools like firewalls and VPNs.
70
Fill in the blank: A well-architected ZTA improves _______.
Governance and compliance
71
List some additional benefits of ZT.
* Potential cost reduction * Simplification of IT management design * Improved data protection (business critical data and customer data) * Secure remote access * Improved user experience ## Footnote These benefits highlight the comprehensive advantages of adopting a ZT framework.

CCZT (13 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions