Intermediate LevelWeb Security & Cyber Defense
What is Zero Trust Network Access (ZTNA) and how does it replace legacy VPNs?
❓ Interview Prompt: Explain Zero Trust Architecture (ZTA), "Never Trust, Always Verify", ZTNA vs legacy VPNs, identity-based micro-segmentation, and device posture.
Legacy VPNs grant broad network-level access once a user authenticates (Perimeter Security). Zero Trust Network Access (ZTNA) operates on the principle "Never Trust, Always Verify":
Core ZTNA Pillars:
1
Identity-Bound Access: Grants access to specific applications, not entire network subnets.
2
Continuous Verification: Continuously re-evaluates user identity, device security posture, and location context on every single request.
3
Micro-Segmentation: Prevents lateral movement across internal servers if an endpoint is compromised.
Code Implementation Example
json
{
"ztnaPolicy": "App-Level Access",
"user": "alice@company.com",
"devicePosture": {
"diskEncrypted": true,
"edrAgentActive": true
},
"accessGrantedTo": ["https://jira.internal.company.com"],
"networkSubnetAccess": false
}💡ZTNA continuous device posture and identity verification payload.
🎯 Interview Key Takeaway
ZTNA replaces legacy VPNs by granting application-level access based on continuous identity and device posture verification.
#Zero Trust#ZTNA#Network Security#Intermediate
Back to all Web Security & Cyber Defense Questions→