CASP+: Quiz on Deperimeterization Zero Trust Architectures (ZTA)

What is the main concept behind Zero Trust Architectures?

• Always trust, never verify

• Never trust, always verify

• Trust everyone, never verify

• Trust selectively, sometimes verify

What does NIST SP 800-207 define Zero Trust as?

• A user-based security paradigm

• A device-based security paradigm

• A resource-based security paradigm

• A network-based security paradigm

What is the purpose of microsegmentation in Zero Trust Architectures?

• To remove all security barriers

• To isolate and secure different parts of the network

• To allow unrestricted access to all resources

• To create a single access point for all users

What is deperimeterization in the context of modern infrastructures?

• Strengthening the network perimeter

• Defining a clear boundary between inside and outside

• Removing the distinction between inside and outside

• Creating multiple layers of security perimeters

Which trend is NOT driving deperimeterization according to the text?

• Cloud

• Blockchain

• Outsourcing and Contracting

• Remote Work

What is a common security risk associated with employees working from home?

• Being physically present in the office

• Having strong encryption

• Using personal devices

• Using secure networks

Why are mobile devices considered a security risk in modern infrastructures?

• They are always updated and patched

• They are not connected to the internet

• They are often lost or stolen

• They have limited processing power

What is the main principle behind Zero Trust Architectures regarding network boundaries?

• Relying solely on network-based defenses

• Focusing on users, assets, and resources

• Defining clear network perimeters

• Allowing unrestricted access to all networks

What is the role of cloud platforms in modern infrastructures?

• To eliminate the need for external services

• To centralize all data centers

• To limit access to resources

• To distribute computing resources globally

Why are wireless networks considered susceptible to exploits?

• Because they are not used by many organizations

• Because they are often open and unsecured

• Because they have limited coverage

• Because they are always secure