Zero trust architecture basics in Cybersecurity - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the core principle of Zero Trust Architecture?

Never trust, always verify. This means no user or device is trusted by default, even if inside the network.

beginner

Why does Zero Trust Architecture assume breach?

It assumes attackers may already be inside the network, so continuous verification and strict access controls are needed.

intermediate

Name two key components of Zero Trust Architecture.

1. Strong identity verification (like multi-factor authentication). 2. Least privilege access (users get only the access they need).

intermediate

How does Zero Trust Architecture handle device security?

It continuously checks device health and compliance before allowing access, ensuring only trusted devices connect.

beginner

What role does network segmentation play in Zero Trust?

It divides the network into smaller parts to limit access and reduce the impact if a breach occurs.

What does Zero Trust Architecture primarily focus on?

A Never trusting any user or device without verification

B Allowing free access inside the network

C Trusting all internal users by default

D Only securing the network perimeter

Zero Trust means never trusting users or devices without verifying their identity and security status.

Which of the following is a key practice in Zero Trust Architecture?

A Single-factor authentication

B Least privilege access

C Open network access

D Ignoring device health

Least privilege access means users get only the minimum access needed, reducing risk.

Why is continuous monitoring important in Zero Trust?

A To detect and respond to threats quickly

B To allow unrestricted access

C To reduce network speed

D To trust devices once verified

Continuous monitoring helps detect suspicious activity and respond before damage occurs.

What does network segmentation help prevent in Zero Trust?

A Device updates

B Faster internet speed

C User convenience

D Wider spread of attacks

Segmenting the network limits how far an attacker can move if they breach one part.

Which technology supports strong identity verification in Zero Trust?

A Password only

B Guest access

C Multi-factor authentication

D Open Wi-Fi

Multi-factor authentication adds extra layers of identity proof beyond just passwords.

Explain the main idea behind Zero Trust Architecture and why it is important in cybersecurity.

Think about how trusting everyone inside a network can be risky.

Describe how network segmentation and least privilege access work together in Zero Trust Architecture.

Consider how dividing a network and limiting user rights help security.