Open cardosec

Case 4B6688 · Network · L2 Practitioner

Zero Trust Networking

Practise as: Explain it
  1. 01 What is it?
  2. 02 How is it abused?
  3. 03 How do you stop it?
Practise this card
What a strong answer covers

Try it out loud first. Then check yourself:

  1. Zero trust removes implicit trust from network location; every request is authenticated and authorized
  2. NIST SP 800-207 components: policy engine, policy administrator, and policy enforcement point
  3. Decisions use identity, device posture, and context, re-evaluated per session rather than once at VPN login
  4. ZTNA replaces broad VPN access with per-application brokered access, shrinking lateral movement paths
  5. Legacy protocols and flat OT networks remain hard; zero trust is a migration strategy, not a product

If the interviewer pushes back

  • Where does microsegmentation fit when user-to-app access is already brokered by ZTNA?

Go deeper

cardosec draws a security topic and gives you a clock: explain it out loud with no notes, then see what you covered and what you missed. Free during early access.