Study. uk . com
  1. Home
  2. All questions
  3. Question 200

CISSP study material · question 200 of 500

A design places zero trust component communication on the same network segment as application traffic. Which separation does SP 800-207 describe?

  1. Component communication runs on the data plane while application data is tunnelled.
  2. Separation is unnecessary because all traffic is authenticated.
  3. Both run on the control plane, with application data encrypted end to end.
  4. Component communication runs on a control plane while application data runs on a separate data plane.
Show the answer

Answer: D. Component communication runs on a control plane while application data runs on a separate data plane.

SP 800-207 has the zero trust logical components communicate over a separate control plane while application data travels on a data plane.

Source: NIST SP 800-207 (NIST) — SP 800-207 > 3 Logical Components of Zero Trust Architecture

Challenge yourself on this topic → Study as cards