Study. uk . com
  1. Home
  2. All questions
  3. Question 207

CISSP study material · question 207 of 500

A retailer proposes applying its full zero trust tenets to anonymous shoppers browsing its public catalogue. What does SP 800-207 say about that scope?

  1. The tenets apply to consumers only once they have created an account and accepted terms.
  2. The tenets exclude partner organisations, which are governed by contract instead.
  3. The tenets apply to all users equally, including anonymous ones.
  4. The tenets address work within the organisation and with partners; an enterprise cannot impose internal policy on anonymous public users.
Show the answer

Answer: D. The tenets address work within the organisation and with partners; an enterprise cannot impose internal policy on anonymous public users.

The tenets apply to work done within an organisation or with partners, not to anonymous public or consumer-facing processes, though some policies may apply to users with a special relationship.

Source: NIST SP 800-207 (NIST) — SP 800-207 > 2.1 Tenets of Zero Trust

Challenge yourself on this topic → Study as cards