You are selecting technology components for a multi-agent system that will process regulated financial data. Leadership mandates Zero Trust: no implicit trust between agents, minimized lateral movement, and mappable compliance controls. Which component specification is most aligned?
Select an answer to reveal the explanation.
Short Explanation
Correct answer: B. Architects must specify Zero Trust multi-agent components: per-agent identity scoping, lateral movement prevention, and compliance control mapping. Shared Owner identities (A), flat mutual trust (C), and auth bypasses (D) violate Zero Trust. Design identity, network, and tool planes so compromise of one agent does not unlock the estate.
Full Explanation
Under “Specify technology components,” AI-500 includes Zero Trust multi-agent solutions with per-agent identity scoping, lateral movement prevention, and compliance control mapping for regulated deployments. That means distinct identities, least-privilege tool and data access, segmented networking, authenticated agent-to-agent channels, and a matrix linking controls to regulatory requirements (access logs, encryption, retention). Option A maximizes blast radius. Option C assumes a soft inside network. Option D trades security for micro-latency and fails audits. Document threat models for prompt injection leading to tool abuse and show how component choices mitigate them.