Study. uk . com
  1. Home
  2. All questions
  3. Question 203

CISSP study material · question 203 of 500

An architect writing a zero trust network plan asks what posture to adopt toward the enterprise's own private network. What does SP 800-207 assume?

  1. It is trusted for enterprise-owned devices and untrusted for personally owned ones.
  2. It is not an implicit trust zone: assets should act as though an attacker is present, authenticating connections and encrypting traffic.
  3. It is trusted for internal traffic but not for traffic crossing to the internet.
  4. It is trusted once network access control has admitted the device.
Show the answer

Answer: B. It is not an implicit trust zone: assets should act as though an attacker is present, authenticating connections and encrypting traffic.

The first network assumption is that the private network is no implicit trust zone; assets behave as though an attacker is already inside it.

Source: NIST SP 800-207 (NIST) — SP 800-207 > 2.2 A Zero Trust View of a Network, assumption 1

Challenge yourself on this topic → Study as cards