Study. uk . com
  1. Home
  2. All questions
  3. Question 204

CISSP study material · question 204 of 500

A field engineer connects a corporate laptop to a hotel network. What posture does SP 800-207 tell that remote asset to take?

  1. Disable local name resolution and route everything through the enterprise.
  2. Treat the network as trusted for outbound traffic only.
  3. Assume the local network is hostile and that traffic may be observed and modified.
  4. Trust the local network once the hotel portal has authenticated the device.
Show the answer

Answer: C. Assume the local network is hostile and that traffic may be observed and modified.

SP 800-207 tells remote subjects to assume the non-enterprise network is hostile and that all traffic is being monitored and potentially modified, authenticating and protecting every connection.

Source: NIST SP 800-207 (NIST) — SP 800-207 > 2.2 A Zero Trust View of a Network, assumption 5

Challenge yourself on this topic → Study as cards