Which Security Model Provides Secure Zones and Reduces Threat Scope?
A systems administrator is working on a solution with the following requirements: • Provide a secure zone. • Enforce a company-wide access control policy. • Reduce the scope of threats. Which of the following is the systems administrator setting up?
Community Votes
100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The question tests the ability to distinguish between actionable security architectures and abstract security principles, often trapping candidates who confuse implementation frameworks with foundational data protection concepts.
This question evaluates the Zero Trust security model's ability to enforce strict access controls while minimizing threat exposure through architectural design. The community unanimously identifies Zero Trust as the only framework that directly satisfies all three stated operational requirements.
Candidates frequently select CIA because it is a universally recognized security triad, but they overlook that CIA defines data protection objectives rather than an implementable network architecture or access enforcement mechanism.
Community Discussion (4 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Core Framework vs. Abstract Concepts
The scenario outlines three critical operational goals: creating a secure zone, enforcing centralized access policies, and minimizing threat impact. These are hallmark characteristics of Zero Trust, a modern security paradigm built on the principle of "never trust, always verify." Unlike traditional perimeter-based models, Zero Trust assumes breach and continuously validates every user, device, and application before granting access.Mapping Requirements to Zero Trust
As highlighted by community contributors like squishy_fishy, Zero Trust naturally aligns with the prompt's demands. It utilizes micro-segmentation to create isolated secure zones, ensuring lateral movement is restricted. Simultaneously, it enforces company-wide access control policies through identity-centric authentication and least-privilege access rules. By constantly verifying credentials and device health, it inherently reduces the scope of threats and limits potential damage from compromised assets.Evaluating the Incorrect Options
While AAA (Authentication, Authorization, Accounting) provides the underlying mechanisms for access management, it is a protocol framework rather than a comprehensive security architecture designed specifically for threat reduction and secure zoning. Non-repudiation ensures users cannot deny their actions, which relates to auditing and legal accountability, not network segmentation or access enforcement. Finally, as noted in the discussion, CIA represents a foundational security triad focused on data properties, not an implementable system or zone configuration.Conclusion
Choosing Zero Trust demonstrates an understanding of how modern security architectures proactively manage risk through continuous verification and strict compartmentalization, making it the definitive answer for this scenario.Official Reference
Exam Strategy
When encountering questions that list multiple operational goals like "secure zone," "access control," and "threat reduction," prioritize identifying a holistic security architecture over isolated protocols or theoretical models. Look for keywords implying continuous verification, least privilege, and network compartmentalization, which strongly point toward Zero Trust implementations.
Related Analysis
Practice All SY0-701 Questions
Access 100 questions with complete answers and detailed explanations.
View Full SY0-701 Practice Test →