Zero trust network architecture in Computer Networks - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the main principle of Zero Trust Network Architecture?

The main principle is 'never trust, always verify.' It means no user or device is trusted by default, even if inside the network. Every access request must be verified before granting access.

beginner

How does Zero Trust differ from traditional network security?

Traditional security trusts users and devices inside the network by default. Zero Trust assumes no trust anywhere and requires continuous verification for every access request.

intermediate

Name two key components of Zero Trust Network Architecture.

Two key components are: 1) Strong identity verification (like multi-factor authentication), and 2) Micro-segmentation, which limits access to only what is needed.

intermediate

Why is micro-segmentation important in Zero Trust?

Micro-segmentation divides the network into small zones to control access tightly. This limits the spread of attacks and ensures users only access what they need.

intermediate

What role does continuous monitoring play in Zero Trust?

Continuous monitoring checks user behavior and device health in real time to detect suspicious activity and enforce security policies dynamically.

What does Zero Trust Network Architecture assume about users and devices?

A They are never trusted by default

B They are trusted if inside the network

C They are trusted if they have a password

D They are trusted if connected via VPN

Zero Trust means no user or device is trusted automatically, even if inside the network.

Which of the following is a key feature of Zero Trust?

A Open network access

B Trust based on IP address

C Micro-segmentation

D No authentication needed

Micro-segmentation limits access zones to improve security in Zero Trust.

What is the purpose of continuous monitoring in Zero Trust?

A To allow all users access

B To disable security policies

C To reduce network speed

D To detect suspicious activity in real time

Continuous monitoring helps detect threats and enforce policies dynamically.

Which method strengthens identity verification in Zero Trust?

A Single password login

B Multi-factor authentication

C No login required

D IP address filtering only

Multi-factor authentication adds extra verification layers for security.

Zero Trust Network Architecture is best described as:

A Never trust, always verify

B Trust only external users

C Trust everyone inside the network

D Trust based on device type

The core idea is to never trust by default and always verify access requests.

Explain the core idea of Zero Trust Network Architecture and why it is important.

Think about how traditional networks trust users inside the network.

Describe how micro-segmentation helps improve security in a Zero Trust model.

Consider how breaking a network into smaller parts can control access.