Tools / Zero Trust Architecture (ZTA) Interview questions
How do you use a software-defined perimeter (SDP) in Zero Trust?
A software-defined perimeter hides infrastructure from the network entirely until a client's identity has been verified, an approach often called a "black cloud" because unauthenticated users cannot even see that a service exists, let alone probe it.
Typical SDP flow: the client authenticates to a controller out-of-band, often using mutual TLS combined with single-packet authorization (SPA), a lightweight signal that opens a connection only after cryptographic verification. Only then does the controller instruct a gateway to open a narrow, encrypted path between that specific client and the specific resource requested.
Because no port is listening publicly until this handshake completes, SDP significantly reduces the attack surface available to network scanning and reconnaissance.
More Related questions...
