Study. uk . com
  1. Home
  2. All questions
  3. Question 211

CISSP study material · question 211 of 500

A procurement team insists zero trust requires certificate-based authentication specifically. What does SP 800-207 say about technology choices?

  1. Only hardware-bound credentials satisfy the tenets.
  2. Technology choice is fixed by the trust algorithm the policy engine implements.
  3. Certificates are mandatory for any subject accessing an enterprise resource.
  4. The tenets are technology agnostic: identification might rest on a password, a certificate or a one-time password.
Show the answer

Answer: D. The tenets are technology agnostic: identification might rest on a password, a certificate or a one-time password.

SP 800-207 states the tenets are technology agnostic, giving username and password, certificates and one-time passwords as examples of how user identification might be done.

Source: NIST SP 800-207 (NIST) — SP 800-207 > 2.1 Tenets of Zero Trust

Challenge yourself on this topic → Study as cards