CompTIA CS0-003 Exam - Topic 3 Question 38 Discussion

Actual exam question for CompTIA's CS0-003 exam

Question #: 38
Topic #: 3

An organization is planning to adopt a zero-trust architecture. Which of the following is most aligned with this approach?

ANetwork segmentation to separate sensitive systems from the rest of the network.

BWhitelisting specific IP addresses that are allowed to access the network.

CTrusting users who successfully authenticate once with multifactor authentication.

DAutomatically trusting internal network communications over external traffic.

Show Suggested Answer

Suggested Answer: A

Comprehensive and Detailed Step-by-Step

Network segmentation supports zero-trust principles by ensuring sensitive systems are isolated and access is restricted based on identity, role, and context. Unlike traditional models, zero-trust architecture does not automatically trust authenticated users or internal network traffic. It enforces strict access controls to minimize risk.

CompTIA CySA+ Study Guide (Chapter 2: Zero Trust and Network Segmentation, Page 52)

CompTIA CySA+ Objectives (Domain 1.1 - Zero Trust Architecture)

by Ty at Jan 22, 2025, 10:38 AM

Limited Time Offer

25%

Off

Get Premium CS0-003 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Dong

6 months ago

Wait, are we really trusting users after just one MFA? That sounds sketchy!

upvoted 0 times

...

Owen

6 months ago

D is a big no, trusting internal traffic is against zero-trust principles.

upvoted 0 times

...

Corinne

6 months ago

C seems risky, just because they authenticate once doesn’t mean they’re safe.

upvoted 0 times

...

Mabel

7 months ago

I think B makes more sense, whitelisting is key!

upvoted 0 times

...

Wilda

7 months ago

A is definitely the way to go for zero-trust.

upvoted 0 times

...

Reta

7 months ago

I feel like D is definitely not aligned with zero-trust. Trusting internal communications just seems counterintuitive to the whole concept.

upvoted 0 times

...

Owen

7 months ago

I practiced a question similar to this, and I think trusting users after they authenticate once doesn't align with zero-trust principles. So, I’d lean away from C.

upvoted 0 times

...

Tegan

7 months ago

I'm not entirely sure, but I think whitelisting IPs could be part of a zero-trust strategy too. Maybe B is worth considering?

upvoted 0 times

...

Nickolas

8 months ago

I remember studying network segmentation as a key principle of zero-trust. It seems like A might be the right choice.

upvoted 0 times

...

Edda

8 months ago

Okay, I think I've got this. Zero-trust is about verifying access, not just network segmentation. So I'm going to go with option B, whitelisting specific IPs.

upvoted 0 times

...

Corazon

8 months ago

I'm pretty sure zero-trust is about not relying on network boundaries, so option D about trusting internal traffic doesn't seem right. I'm leaning towards A or B.

upvoted 0 times

...

Elbert

8 months ago

Hmm, I'm a bit confused. Zero-trust means verifying everything, right? So maybe option C about trusting users after MFA is the best answer.

upvoted 0 times

...

Muriel

8 months ago

This question seems straightforward. I think the zero-trust approach is about not automatically trusting anything, so option A seems most aligned with that.

upvoted 0 times

...

Valentin

1 year ago

I still think A) Network segmentation is the best choice for zero-trust architecture.

upvoted 0 times

...

Ozell

1 year ago

I see your point, Adell. Whitelisting can help, but network segmentation is more comprehensive in enforcing zero-trust.

upvoted 0 times

...

Arlette

1 year ago

Trusting internal traffic? That's like letting the fox guard the henhouse. Zero-trust all the way, baby!

upvoted 0 times

Isabelle

1 year ago

A) Network segmentation to separate sensitive systems from the rest of the network.

upvoted 0 times

...

Carey

1 year ago

Trusting internal traffic is risky. Zero-trust is the way to go!

upvoted 0 times

...

Janine

1 year ago

C) Trusting users who successfully authenticate once with multifactor authentication.

upvoted 0 times

...

Genevive

1 year ago

B) Whitelisting specific IP addresses that are allowed to access the network.

upvoted 0 times

...

Kenny

1 year ago

B) Whitelisting specific IP addresses that are allowed to access the network.

upvoted 0 times

...

Glendora

1 year ago

A) Network segmentation to separate sensitive systems from the rest of the network.

upvoted 0 times

...

Ernie

1 year ago

A) Network segmentation to separate sensitive systems from the rest of the network.

upvoted 0 times

...

Adell

1 year ago

But what about option B) Whitelisting specific IP addresses? Wouldn't that also align with zero-trust?

upvoted 0 times

...

Valentin

1 year ago

I agree with Ozell, because zero-trust architecture requires segmenting sensitive systems.

upvoted 0 times

...

Kathrine

1 year ago

Ah, the classic network segmentation approach. It's like building a firewall around your sensitive data - except the firewall is made of Swiss cheese.

upvoted 0 times