Study. uk . com
  1. Home
  2. All questions
  3. Question 205

CISSP study material · question 205 of 500

A workload is migrated from an on-premises data centre to a cloud instance and loses several of the controls it previously ran under. Which zero trust assumption does this violate?

  1. Cloud instances must be treated as public rather than enterprise resources.
  2. Enterprise resources must remain on enterprise-owned infrastructure.
  3. Every workload must be re-authorised by the policy administrator after migration.
  4. Assets and workloads should keep a consistent security policy and posture when they move between enterprise and non-enterprise infrastructure.
Show the answer

Answer: D. Assets and workloads should keep a consistent security policy and posture when they move between enterprise and non-enterprise infrastructure.

SP 800-207 expects assets and workloads to retain their security posture when moving to or from enterprise-owned infrastructure, covering both roaming devices and migrating workloads.

Source: NIST SP 800-207 (NIST) — SP 800-207 > 2.2 A Zero Trust View of a Network, assumption 6

Challenge yourself on this topic → Study as cards