Certified Ethical Hacker (CEH v13) — Question 189

Eric, a cloud security engineer, implements a technique for securing the cloud resources used by his organization. This technique assumes by default that a user attempting to access the network is not an authentic entity and verifies every incoming connection before allowing access to the network. Using this technique, he also imposed conditions such that employees can access only the resources required for their role.
What is the technique employed by Eric to secure cloud resources?

Answer options

• A. Demilitarized zone
• B. Zero trust network
• C. Serverless computing
• D. Container technology

Correct answer: B

Explanation

The correct answer is B, Zero trust network, as it emphasizes verifying every user and device attempting to access the network, assuming they cannot be trusted by default. Options A, C, and D do not focus on the verification of every connection or the principle of least privilege for user access, making them unsuitable for the described scenario.