A company wants to enhance its cloud security by adopting a strategy where trust is never assumed, and verification is continuously required. Which cloud security architecture does this describe?

Question

BlackTom AI · Accepted Answer

Zero Trust Architecture assumes no implicit trust for any user or device—every access request must be authenticated, authorized, and continuously validated based on identity, device posture, and context.

1) Relevant knowledge points and concepts
- Zero Trust core principles: “never trust, always verify”; assume breach; least privilege access; microsegmentation; continuous monitoring and dynamic policy enforcement.  
- Single Sign-On (SSO): convenience authentication method that lets users sign in once to access multiple services.  
- Multi-factor Authentication (MFA): an authentication control that requires multiple proofs of identity.  
- Virtual Private Cloud (VPC): a logically isolated network in a cloud provider.

2) Step-by-step reasoning
- The phrase “trust is never assumed” directly matches the Zero Trust maxim to treat all actors and network segments as potentially hostile.  
- “Verification is continuously required” maps to continuous validation of user identity, device health, and session context, which is a core operational behavior of Zero Trust (not a one-time check).  
- Zero Trust integrates identity verification, device posture checks, least-privilege access, microsegmentation, and continuous monitoring to make authorization decisions for each request.

3) Intermediate steps (conceptual)
- Identify the architecture whose principles emphasize no implicit trust → Zero Trust.  
- Check whether SSO, MFA, or VPC embody continuous verification and the “never trust” stance:
  - SSO: centralizes authentication but typically is a one-time sign-on and does not enforce continuous revalidation or microsegmentation.  
  - MFA: strengthens authentication but is a single control, not a full architecture ensuring continuous, context-aware authorization.  
  - VPC: provides network isolation but does not itself enforce identity-based continuous access controls.

4) Why the correct answer is correct
Zero Trust is an overall security architecture that defines continuous verification of identity and device posture and enforces least privilege for every access request—exactly matching “trust is never assumed, and verification is continuously required.”

5) Why other options are incorrect (brief)
- Single Sign-On (SSO): simplifies login but does not implement continuous verification or assume-breach principles.  
- Multi-factor Authentication (MFA): an authentication control, not a comprehensive architecture.  
- Virtual Private Cloud (VPC): a networking construct for isolation, not an identity- and policy-driven access architecture.

Conclusion: The correct answer is Zero Trust Architecture, which matches the provided answer.

A company wants to enhance its cloud security by adopting a strategy where trust is never assumed, and verification is continuously required. Which cloud security architecture does this describe?单项选择题

类似问题

You own a bond that pays $64 in interest annually. The face value is $1,000 and the current market price is $1,021.61. The bond matures in 11 years. What is the yield to maturity?

Which of the following statements is CORRECT?

It will cost $9,600 to acquire an ice cream cart that is expected to produce cash inflows of $3,600 a year for three years. After the three years, the cart is expected to be worthless. What is the payback period?

A 3.25 percent Treasury bond is quoted at a price of 99.04. The bond pays interest semiannually. What is the current yield?

更多留学生实用工具

智能学习助手

风格化写作助手

论文查重助手

文献引用助手

课堂转译助手

课堂笔记助手

Quiz搜索助手

学校历年真题

智能刷题助手

智能匹配练习

希望你的学习变得更简单