FUNDAMENTALS OF SECURITY

Question 1

DEFINE THE CONCEPT OF ZERO TRUST

Answer 1

ZERO TRUST DEMANDS VERIFICATION FOR EVERY DEVICE , USER AND TRANSACTION WITHIN THE NETWORK, RGARDLESS OF ITS ORIGIN

Question 2

HOW TO CREATE A ZERO TRUST ARCHITECTURE?

Answer 2

WE NEED
1. A CONTROL PLANE -> IT LAYS OUT THE POLICIES AND PROCEDURES. (ADAPTIVE IDENTITY,THREAT SCOPE REDUCTION, POLICY DRIVEN ACCESS CONTROL, SECURED ZONES)

2. A DATA PLANE -> THE DATA PLANE ENSURES THIS POLICIES ARE PROPERLY EXECUTED(SUBJECT/ SYSTEM , POLICY ENFORCEMENT POINT)

THE SUBJECT/SYSTEM IS THE INDIVIDUAL OR ENTITY ATTEMPTING TO GAIN ACCESS

POLICY ENFORCEMENT POINT->ALLOW OR RESTRICT ACCESS

Question 3

WHAT TYPE OF POLICIES ARE USED BY THE CONTROL PANE?

Answer 3

POLICY ENGINE -> IT CROSS-REFERENCES THE ACCESS REQUEST WITH ITS PREDEFINE POLICIES

POLICY ADMINSTRATOR -> IT MANAGES THE ACCESS POLICIES