Exercises › Security Architecture Language › Zero-Trust Architecture

Zero-Trust Architecture

5 questions · Security Architecture Language

1. A network architecture that grants access based solely on verified identity and device health — regardless of whether the user is inside or outside the corporate network — is called:

A perimeter-based security model A zero-trust architecture A software-defined perimeter

2. The zero-trust principle 'never trust, always verify' means that even a request from inside the corporate network must:

Be routed through the corporate VPN Be authenticated and authorised before access is granted Be logged but can proceed without authentication

3. In a zero-trust design, network segments are isolated so that a compromised endpoint in one segment cannot access services in other segments without re-authentication. What is this segmentation technique called?

Network slicing Microsegmentation VPN tunnelling

4. The Google BeyondCorp model moved away from the corporate VPN and instead allows employees to access work applications from any network using device verification and identity authentication. What security model did Google implement?

A software-defined WAN A zero-trust network access model An identity-aware proxy model

5. In a zero-trust architecture, access control is enforced as close to the resource as possible, not at the network perimeter. This means the primary security control is:

The network firewall Identity and device-based access controls on the resource itself The VPN gateway

Exercise complete!

out of 5 questions

Back to Security Architecture Language All exercises