What role should zero trust architectures play in your organization$$s information security strategy, plans, and programs?

Question $41$ Answer

a$.$

None just yet; this is a theoretical concept that is still being developed by the IETF and government$-$industry working groups.

b$.$

If you$$ve done your threat modeling and vulnerability assessment correctly, you don$$t need the added complexity of a zero trust architecture.

c$.$

By guiding you to micro$-$segment your networks and systems into smaller, finer$-$grain zones of trust, you focus your attention on ensuring that any attempts to cross a connection between such zones has to meet proper authentication standards.

d$.$

Since the protocols you need to support zero trust do not work on IPv$4,$ you need to wait to include zero trust architectures until you$$ve transitioned your systems to IPv$6.$