A network team proposes: "Any device physically plugged into a socket inside our buildings is on
the internal VLAN, so it is trusted and may reach any internal server without further checks.
External users go through the VPN."
Which criticism follows from the zero trust principles in Lecture 8?

Question

A network team proposes: "Any device physically plugged into a socket inside our buildings is on
      the internal VLAN, so it is trusted and may reach any internal server without further checks.
      External users go through the VPN." 
       Which criticism follows from the zero trust principles in Lecture 8?

Answer

The only problem is the VLAN itself; zero trust requires all internal hosts to be placed on a single flat network.

Answer

The design is sound, provided the VPN gateway performs multi-factor authentication for external users.

Answer

Trust is being granted by location; every request should instead be authenticated, authorised and granted least privilege regardless of where it originates.

Answer

The design is sound, because zero trust concerns only traffic arriving from the public internet.

Crowdly

A network team proposes: "Any device physically plugged into a socket inside our...

Want instant access to all verified answers on online.codl.lk?