Trust Boundaries in Secure Infrastructure Design

1. How should trust boundaries be documented in infrastructure design?

Verbally to team members only

In network diagrams with clear data flow annotations

In vendor documentation

Trust boundaries need not be documented

2. How does continuous monitoring support trust boundary enforcement?

It prevents all security incidents

It detects anomalous traffic crossing boundaries for investigation

It eliminates the need for firewalls

It replaces access controls

3. What is a critical security implication of poorly defined trust boundaries?

Reduced network speed

Increased likelihood of lateral movement and privilege escalation

Higher hardware costs

Simplified compliance audits

Submit

5. Which governance framework emphasizes defining and maintaining trust boundaries?

COBIT

NIST Cybersecurity Framework

Both COBIT and NIST CSF

Neither framework addresses boundaries

Submit

7. What role does encryption play in protecting data crossing trust boundaries?

It eliminates the need for other security controls

It provides confidentiality and integrity assurance for boundary-crossing traffic

It only applies to internal networks

It replaces authentication requirements

8. Which architectural pattern best supports trust boundary enforcement in hybrid environments?

Monolithic design

Flat network topology

Defense-in-depth with identity-based boundaries

Single-layer firewall protection

Submit

10. A network administrator implements network access control (NAC) at trust boundaries. This is an example of which control category?

Detective control

Preventive control

Corrective control

Compensating control

11. Which security model assumes no implicit trust and requires verification at each access point?

Zero-trust architecture

Perimeter-based security

Defense-in-depth

Network segmentation only

12. Which of the following represents a violation of trust boundary design?

Encrypting all inter-zone communication

Allowing direct database access from the internet

Implementing multi-factor authentication

Logging all boundary crossings

13. What is the relationship between trust boundaries and the principle of least privilege?

They are unrelated concepts

Trust boundaries define zones; least privilege restricts access within and across them

Least privilege eliminates the need for trust boundaries

Trust boundaries replace the need for privilege management

Submit

15. Which protocol should be enforced at trust boundaries to protect data in transit?

HTTP

TLS/SSL or equivalent encryption

DNS

DHCP

16. What does microsegmentation accomplish in infrastructure design?

Reduces bandwidth consumption

Creates isolated trust zones to limit lateral movement

Eliminates the need for authentication

Speeds up network performance

17. A trust boundary should be drawn between which entities in a typical three-tier application?

Web tier and application tier only

Between all three tiers and external network

Only between database and internet

At the firewall entrance only

18. Which control type is most effective at enforcing trust boundaries?

Detective controls

Preventive controls

Corrective controls

Compensating controls

19. In a DMZ, the primary trust boundary exists between which two network segments?

Internet and internal network

Firewall and switches

Web servers and databases

Routers and endpoints

20. What is the primary purpose of defining trust boundaries in infrastructure design?

To reduce network latency

To identify and control data flow between trusted and untrusted zones

To simplify firewall rules

To eliminate the need for encryption

Infrastructure Expert Reviewing Trust Boundaries in a Design Quiz

1. How should trust boundaries be documented in infrastructure design?

2.

What first name or nickname would you like us to use?

2. How does continuous monitoring support trust boundary enforcement?

3. What is a critical security implication of poorly defined trust boundaries?

4. In a software-defined network, trust boundaries are enforced through____.

5. Which governance framework emphasizes defining and maintaining trust boundaries?

6. Implicit trust between systems within the same network segment is a risk because____.

7. What role does encryption play in protecting data crossing trust boundaries?

8. Which architectural pattern best supports trust boundary enforcement in hybrid environments?

9. Trust boundaries in cloud infrastructure differ from on-premises primarily because____.

10. A network administrator implements network access control (NAC) at trust boundaries. This is an example of which control category?

11. Which security model assumes no implicit trust and requires verification at each access point?

12. Which of the following represents a violation of trust boundary design?

13. What is the relationship between trust boundaries and the principle of least privilege?

14. In zero-trust architecture, authentication and authorization must occur at every____.

15. Which protocol should be enforced at trust boundaries to protect data in transit?

16. What does microsegmentation accomplish in infrastructure design?

17. A trust boundary should be drawn between which entities in a typical three-tier application?

18. Which control type is most effective at enforcing trust boundaries?

19. In a DMZ, the primary trust boundary exists between which two network segments?

20. What is the primary purpose of defining trust boundaries in infrastructure design?