問題文
A city transit agency SOC is documenting what its zero trust program does and does not address, so that the SOC does not stop monitoring for things the program leaves open. Which statements correctly describe the limits of a zero trust approach? (Select two.)
選択肢
- Zero trust makes data exfiltration impossible, since no request leaves the environment without an authorization decision.
- Removing implicit trust between internal segments limits how far an adversary can move, but it does not reduce the damage the adversary can do within the segment it already reached.
- Verifying every request does not stop an adversary who has taken over a legitimate account, because that adversary's requests are verified successfully.
- Zero trust removes the need for network traffic monitoring, since every request is authorized at the point of access and the authorization decision is a more reliable record than the traffic itself.
- Zero trust guarantees that credentials cannot be reused, since each request is evaluated independently of the previous one.