Cyber Attacks and Defense in Practice
Which of the following correctly compares a traditional remote-access VPN with ZTNA (zero trust network access) as ways for remote employees to use internal systems?
- AZTNA connects a device to the whole internal network once it connects, so it gives free access to more systems than a VPN, without any checks
- BWith a VPN a connected device can often reach a wide range of the internal network, whereas ZTNA checks the user and device and connects them only to the applications allowed
- CBoth VPN and ZTNA merely encrypt traffic, and there is no difference at all in the range of systems a connected user can access
Show answer and explanation
Answer: B. With a VPN a connected device can often reach a wide range of the internal network, whereas ZTNA checks the user and device and connects them only to the applications allowed
A remote-access VPN makes an outside device part of the internal network; after connecting, it can often reach widely whatever the network settings allow, and stolen credentials become a foothold for intrusion. ZTNA checks the user's authentication and the device state and then brokers connections only to individual allowed applications, without exposing the applications directly to the internet. This reduces how far an attacker can reach after a compromise. VPN appliances themselves are also exposed to the internet, and their vulnerabilities often become the path of intrusion, which is one reason for the migration.
- A. The description is reversed. ZTNA connects only to the applications allowed.
- B. Correct. The difference is whether access is granted at the level of the network or allowed per application.
- C. Both encrypt traffic, but they differ greatly in their approach to the range of access.
Continue: 9 more Cyber Attacks and Defense in Practice questions