Perimeter-less Network Topology and SASE Architecture

CS0-004 By islever Editorial Last updated

Explain concepts related to system and network architecture in security operations. Summarize concepts related to the use of AI in security operations.

Short answer

B Secure access service edge (SASE) implements a perimeter-less topology by combining SD-WAN with Zero Trust Network Access (ZTNA) and other security services to enforce identity-based access control regardless of location.

Question

Which of the following network architectures would best implement a perimeter-less network topology?
  1. Hybrid cloud networks
  2. Secure access service edge Correct Answer
  3. Cloud-native computing
  4. Content delivery networks

Key Takeaways

The question tests the understanding that 'perimeter-less' security relies on identity-based access (Zero Trust), which is delivered through SASE, not just cloud connectivity or content distribution.

Secure access service edge (SASE) is the network architecture that best implements a perimeter-less topology by integrating networking and zero-trust security services. This approach ensures secure access based on identity rather than network location.

Common mistake: Hybrid cloud networks (A) are often chosen because they involve multiple environments, but they describe infrastructure placement rather than the security architecture needed to eliminate the perimeter. SASE provides the specific security stack (ZTNA, CASB) required for this goal.

Expert Analysis

The question asks for the network architecture that best implements a perimeter-less topology. This concept is foundational to Zero Trust security models, which assume no implicit trust based on network location.

B. Secure Access Service Edge (SASE) is the correct answer. SASE is a cloud-native architecture that combines wide-area networking (SD-WAN) with comprehensive security services—including Zero Trust Network Access (ZTNA), Cloud Access Security Brokers (CASB), and Secure Web Gateways (SWG). By decoupling security from the physical network edge, SASE enforces access controls based on user identity, device health, and context rather than IP address or location. This effectively eliminates the traditional perimeter, allowing secure access from anywhere.

Why other options are incorrect:

  • A. Hybrid cloud networks: While hybrid clouds often use Zero Trust principles, the term itself describes a deployment model (on-premises + cloud) rather than a specific architecture designed to remove the perimeter. It does not inherently imply a perimeter-less security framework without additional components like SASE.
  • C. Cloud-native computing: This refers to building applications using microservices and containers within a cloud environment. While these apps may be accessed via Zero Trust, cloud-native computing is an application development methodology, not a network security architecture.
  • D. Content delivery networks (CDNs): CDNs distribute content geographically to reduce latency. They provide caching and DDoS protection but do not replace the core network security functions required for a perimeter-less identity-based access model.

Official Reference

https://www.comptia.org/training/resources/cybersecurity-analyst-cs0-004

This link opens the official vendor documentation in a new tab.

Exam Strategy

When encountering terms like 'perimeter-less', 'zero-trust', or 'identity-based access', immediately look for architectures that combine networking and security into a unified cloud service. SASE is the primary candidate for these scenarios in modern security exams. Distinguish between deployment models (like hybrid cloud) and security frameworks (like SASE/Zero Trust).

Frequently Asked Questions

What is the difference between SASE and Zero Trust?

Zero Trust is a security philosophy or model that assumes no trust by default. SASE is a specific cloud-based architecture that delivers Zero Trust principles by combining networking (SD-WAN) with security services (ZTNA, CASB).

Does hybrid cloud automatically mean perimeter-less?

No. Hybrid cloud refers to the mix of on-premises and cloud infrastructure. While it often requires perimeter-less security, the term itself does not define the security architecture used to achieve it.

More CS0-004 FAQ →

Discussion 1 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 1

  1. iamoma 👍 1 Answered B
    Why B is correct: SASE combines networking and security services, such as SD-WAN, secure web gateways, cloud access security broker (CASB), and zero-trust network access (ZTNA), to provide secure access based on user identity, device, and context rather than relying on a traditional network perimeter.

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Handling Zero-Day Vulnerabilities Without Patches

S-grade

Why Segment Business-Critical Assets from Legacy Systems

S-grade

Analyzing Tshark Filters for HTTP and UDP Traffic

A-grade

← Back to CS0-004 Study Guide