Zero Trust principles revolve around minimizing trust in the network and verifying every interaction. To adopt Zero Trust, customers should start by gaining visibility and understanding the network and its transactions.
A: Understand which users, devices, infrastructure, applications, data, and services are part of the network or have access to it.
* The first step in adopting Zero Trust is understanding the full scope of the network. Identifying users, devices, applications, and data is critical for building a comprehensive security strategy.
C: Map the transactions between users, applications, and data, then verify and inspect those transactions.
* After identifying all assets, the next step is to map interactions and enforce verification and inspection of these transactions to ensure security.
Why Other Options Are Incorrect
* B:Enabling CDSS subscriptions is important for protection but comes after foundational Zero Trust principles are established.
* D:Implementing VM-Series NGFWs is part of enforcing Zero Trust, but it is not the first step.
Visibility and understanding come first.
References:
* Palo Alto Networks Zero Trust Overview