ExpertHard1 markMultiple Choice
CPA · Question 18 · Area II: Security
A company implements a 'Zero Trust' architecture. Which of the following principles is central to this approach?
A company implements a 'Zero Trust' architecture. Which of the following principles is central to this approach?
Answer options:
A.
Trust but verify
B.
Perimeter-based security is sufficient
C.
Never trust, always verify, regardless of network location
D.
Internal traffic does not need encryption
How to approach this question
Zero Trust = No implicit trust. Being 'inside' the firewall means nothing.
Full Answer
C.Never trust, always verify, regardless of network location✓ Correct
Zero Trust requires strict identity verification for every person and device trying to access resources on a private network, regardless of whether they are sitting within or outside of the network perimeter.
Common mistakes
Confusing with 'Trust but verify'.
Practice the full CPA ISC Practice Exam 4
82 questions · hints · full answers · grading
More questions from this exam
Q01A CPA is advising a client who is migrating their legacy on-premise ERP system to a cloud environ...HardQ02An auditor is reviewing the Service Level Agreement (SLA) for a client using a public cloud provi...HardQ03A company uses an Infrastructure as a Service (IaaS) model. During an IT audit, the auditor disco...HardQ04An organization is implementing the COSO Enterprise Risk Management (ERM) framework to govern its...HardQ05During a walkthrough of an order-to-cash process, the auditor observes that the sales manager can...Hard