Tools / Zero Trust Architecture (ZTA) Interview questions
What is device posture assessment in Zero Trust?
Device posture assessment evaluates whether an endpoint meets an organization's security baseline before, and during, an access request. Checks typically include OS patch level, disk encryption status, presence and health of an EDR agent, and whether the device is jailbroken or rooted.
The result feeds directly into the Policy Decision Point as one input among several; a fully compliant device with a suspicious login location might still be challenged, while a mildly non-compliant device requesting a low-sensitivity resource might be allowed with monitoring.
Because posture is reassessed continuously, a device that becomes non-compliant mid-session, for example, its EDR agent stops reporting, can lose access immediately rather than waiting for the next login.
More Related questions...
