Tools / Zero Trust Architecture (ZTA) Interview questions
How does Zero Trust differ from the traditional perimeter security model?
The traditional "castle-and-moat" model concentrates defenses at the network edge and implicitly trusts anything that gets inside, whether that's a user, device, or application. Once past the firewall, systems often communicate with minimal additional checks.
| Perimeter Model | Zero Trust Model |
| Trust based on network location | Trust based on continuously verified identity and context |
| Coarse segmentation (VLANs/subnets) | Fine-grained microsegmentation per workload |
| Authentication mostly at login | Authentication and posture re-evaluated continuously |
| Internal traffic often unencrypted/trusted | East-west traffic encrypted and authorized like external traffic |
The practical effect is that lateral movement, which is trivial once an attacker breaches a flat perimeter-based network, becomes much harder because every internal hop is its own checkpoint.
The traditional perimeter model bases trust primarily on:
Under Zero Trust, east-west (internal) traffic is treated:
More Related questions...
