Zero trust architecture basics in Cybersecurity - Mini Project: Build & Apply

Zero Trust Architecture Basics

📖 Scenario: You are working in a cybersecurity team that wants to implement a simple model of Zero Trust Architecture (ZTA) for a small company's network. The goal is to create a basic data structure that represents users, devices, and their access permissions, then apply a simple rule to allow access only if the user and device are trusted.

🎯 Goal: Build a Python program that models a Zero Trust Architecture by creating a dictionary of users with their device trust status, define a trust threshold, check access permissions based on trust, and finalize the access control list.

📋 What You'll Learn

Create a dictionary named user_devices with exact user-device trust status pairs

Define a variable trust_threshold with the value true

Use a dictionary comprehension named access_permissions to allow access only if the device trust status matches the trust_threshold

Add a final key 'policy_enforced' with value true to the access_permissions dictionary

💡 Why This Matters

🌍 Real World

Zero Trust Architecture is a modern cybersecurity approach that assumes no user or device is trusted by default. This project models a simple version of this concept to control access based on trust status.

💼 Career

Understanding Zero Trust principles is essential for cybersecurity professionals to design secure networks and systems that minimize risk from insider and outsider threats.

1

Create the user-device trust dictionary

Create a dictionary called user_devices with these exact entries: 'Alice': true, 'Bob': false, 'Charlie': true, 'Diana': false

Cybersecurity

# Create the user_devices dictionary with exact user trust statuses
# Your code here

Need a hint?

Use curly braces to create a dictionary with user names as keys and boolean trust status as values.

2

Define the trust threshold

Define a variable called trust_threshold and set it to true

Cybersecurity

user_devices = {'Alice': true, 'Bob': false, 'Charlie': true, 'Diana': false}
# Define the trust_threshold variable
# Your code here

Need a hint?

Set trust_threshold to the boolean value true to represent trusted devices.

3

Create access permissions based on trust

Use a dictionary comprehension named access_permissions to include only users from user_devices whose device trust status equals trust_threshold

Cybersecurity

user_devices = {'Alice': true, 'Bob': false, 'Charlie': true, 'Diana': false}
trust_threshold = true
# Create access_permissions dictionary using comprehension
# Your code here

Need a hint?

Use a dictionary comprehension to filter users whose device trust status matches trust_threshold.

4

Add policy enforcement flag

Add a key 'policy_enforced' with value true to the access_permissions dictionary

Cybersecurity

user_devices = {'Alice': true, 'Bob': false, 'Charlie': true, 'Diana': false}
trust_threshold = true
access_permissions = {user: status for user, status in user_devices.items() if status == trust_threshold}
# Add 'policy_enforced' key to access_permissions
# Your code here

Need a hint?

Add the key-value pair directly to the access_permissions dictionary.