CompTIA Exam CS0-003 Topic 3 Question 38 Discussion

Actual exam question for CompTIA's CS0-003 exam

Question #: 38
Topic #: 3

An organization is planning to adopt a zero-trust architecture. Which of the following is most aligned with this approach?

ANetwork segmentation to separate sensitive systems from the rest of the network.

BWhitelisting specific IP addresses that are allowed to access the network.

CTrusting users who successfully authenticate once with multifactor authentication.

DAutomatically trusting internal network communications over external traffic.

Show Suggested Answer

Suggested Answer: A

Comprehensive and Detailed Step-by-Step

Network segmentation supports zero-trust principles by ensuring sensitive systems are isolated and access is restricted based on identity, role, and context. Unlike traditional models, zero-trust architecture does not automatically trust authenticated users or internal network traffic. It enforces strict access controls to minimize risk.

CompTIA CySA+ Study Guide (Chapter 2: Zero Trust and Network Segmentation, Page 52)

CompTIA CySA+ Objectives (Domain 1.1 - Zero Trust Architecture)

by Ty at Jan 22, 2025, 10:38 AM

Limited Time Offer

25%

Off

Get Premium CS0-003 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Valentin

4 months ago

I still think A) Network segmentation is the best choice for zero-trust architecture.

upvoted 0 times

...

Ozell

4 months ago

I see your point, Adell. Whitelisting can help, but network segmentation is more comprehensive in enforcing zero-trust.

upvoted 0 times

...

Arlette

4 months ago

Trusting internal traffic? That's like letting the fox guard the henhouse. Zero-trust all the way, baby!

upvoted 0 times

Isabelle

3 months ago

A) Network segmentation to separate sensitive systems from the rest of the network.

upvoted 0 times

...

Carey

3 months ago

Trusting internal traffic is risky. Zero-trust is the way to go!

upvoted 0 times

...

Janine

3 months ago

C) Trusting users who successfully authenticate once with multifactor authentication.

upvoted 0 times

...

Genevive

3 months ago

B) Whitelisting specific IP addresses that are allowed to access the network.

upvoted 0 times

...

Kenny

3 months ago

B) Whitelisting specific IP addresses that are allowed to access the network.

upvoted 0 times

...

Glendora

3 months ago

A) Network segmentation to separate sensitive systems from the rest of the network.

upvoted 0 times

...

Ernie

3 months ago

A) Network segmentation to separate sensitive systems from the rest of the network.

upvoted 0 times

...

Adell

4 months ago

But what about option B) Whitelisting specific IP addresses? Wouldn't that also align with zero-trust?

upvoted 0 times

...

Valentin

4 months ago

I agree with Ozell, because zero-trust architecture requires segmenting sensitive systems.

upvoted 0 times

...

Kathrine

4 months ago

Ah, the classic network segmentation approach. It's like building a firewall around your sensitive data - except the firewall is made of Swiss cheese.

upvoted 0 times