The correct answer isCbecause Aruba Zero Trust Network Access (ZTNA) fundamentally reduces risk by replacing broad, implicit trust models of VPNs withleast-privilege, identity-based access policies. Instead of giving remote users blanket access to the network, ZTNA dynamically enforcesapplication- and user-specific policies, shrinking the attack surface and preventing lateral movement.
Relevant extracts from official HPE Aruba Networking documentation:
“ZTNA applies Zero Trust principles by continuously verifying user and device identity and assigning least-privilege access based on contextual factors.”
“Unlike traditional VPNs that extend full network access, Aruba ZTNA provides per-application access, dramatically reducing the attack surface.”
“With automated policy enforcement, Aruba ZTNA ensures secure access while preventing unauthorized lateral movement across the network.”
“ZTNA secures the remote workforce by combining granular access control with Zero Trust segmentation, delivering stronger security than legacy VPN models.”
Why the other options are incorrect:
AScalability is a benefit, but it is not the key distinguishing factor compared to VPN—least-privilege security is the core differentiation.
BAruba ZTNA is cloud-native, not dependent on an on-prem management platform, so this is inaccurate.
DLower cost is not the primary positioning; the value lies in enhanced security and reduced risk.
References (HPE Aruba Networking Solutions / Study Guides):
Aruba Zero Trust Network Access (ZTNA) — Solution Overview
Aruba ESP Zero Trust Security — Technical White Paper
Aruba SSE and ZTNA for Remote Workforce — Product Brief
Aruba Security and Access Control — Deployment Guide
===========
