Zero Trust

Question 1

Zero trust

Answer 1

Security framework requiring all assets workflows to be authenticated authorized and continuously validated before being granted or keeping access to application

Question 2

Data plane

Answer 2

Data plane is used for communication (moving data) between software components

Question 3

Policy administrator

Answer 3

Policy administrator generates session specific authentication and authorization token or credentials used to access an enterprise resource

Question 4

Policy decision point (PDP)

Answer 4

Policy decision point is a gatekeeper in policy engine and policy administrator

Question 5

Control plan

Answer 5

Is used by infrastructure components to maintain and configure assets, assets control, communication security. In zero trust requests for access are made through control plane

Question 6

Policy Enforcement Point (PEP)

Answer 6

Policy enforcement point is responsible for enabling, maintaining and eventually terminating connections between a subject and enterprise resource

Question 7

Policy Engine

Answer 7

Policy engineer is responsible for ultimate decision to grant access to resource for a given subject

Question 8

Zero trust architecture

Answer 8

Zero trust Authorization
Control plane = Policy Engine- policies
Policy administrator - decision point
Data plane
Subject => system —> untrusted request—>=> policy enforcement point—>trusted=>enterprise resource

Question 9

Zero trust planes of operation

Answer 9

1.split network into functional planes
2. Data plane => performing actual security process, process the frames, packets, network data
3.control plane => management and control plane, managing all actions, configured policies, rules

Question 10

Data plane versus control plane

Answer 10

On physicals switch - we want to break out different planes of operations. Down of the switch we have interfaces to move data from one part network to another and this is our data plane.so all inputting switches are data plane.
Configuration of switch to help data to be trunk and this is control plane.

Question 11

Adaptive identity

Answer 11

This is where we examining the identity of individual, and applying security controls based on based on what the user is telling on but also based on other informations. Examinations of source of connection, where employee is sitting in the organization etc. Based on that info we can do authentication stronger. Elimination of inputs (people on building and people connected via VPN). Policy driven access control.

Question 12

Security zones

Answer 12

Looking at where we are connecting from, and where we are going on. Setting zones : untrusted and trusted.
Untrusted zone - access denied, put zones as automatic trust where employee is is into internal traffic zone.

Question 13

Policy enforcement point

Answer 13

Evaluation point, this is gatekeeper. All traffic must go via PEP. Provides identification of the users and traffic, gathers all info. Do not give access to

Question 14

policy decision point

Answer 14

This is decision maker, decides to grant or not the access. Evaluated each decision based on policy and other informations. Police engine is evaluating access decision based on policy. Policy administrator communicates with policy engine , generates access token and peels policy enorced point to allow or disallow the access.