Certified Ethical Hacker (CEH v11) — Question 280

Eric, a cloud security engineer, implements a technique for securing the cloud resources used by his organization. This technique assumes by default that a user attempting to access the network is not an authentic entity and verifies every incoming connection before allowing access to the network. Using this technique, he also imposed conditions such that employees can access only the resources required for their role.
What is the technique employed by Eric to secure cloud resources?

Answer options

• A. Demilitarized zone
• B. Zero trust network
• C. Serverless computing
• D. Container technology

Correct answer: B

Explanation

The correct answer is B, Zero trust network, as it aligns with the principle of verifying every user and their access rights before granting entry. Options A, C, and D do not describe security methodologies that focus on user verification and access restrictions in the same way that zero trust does.