Study. uk . com
  1. Home
  2. All questions
  3. Question 194

CISSP study material · question 194 of 500

A design grants unauthenticated access to a records service for any host on the corporate LAN, on the grounds that the LAN sits behind the firewall. Which zero trust tenet does this breach?

  1. Access is granted on a per-session basis.
  2. The enterprise monitors the posture of all owned assets.
  3. All communication is secured regardless of network location, so an internal request must meet the same requirements as an external one.
  4. All resource authentication is dynamic and strictly enforced.
Show the answer

Answer: C. All communication is secured regardless of network location, so an internal request must meet the same requirements as an external one.

Under zero trust, network location alone implies no trust; a request from enterprise-owned infrastructure must satisfy the same security requirements as one from any other network.

Source: NIST SP 800-207 (NIST) — SP 800-207 > 2.1 Tenets of Zero Trust, tenet 2

Challenge yourself on this topic → Study as cards