🛡️ Free practice test question from: zero-trust (Security+)

Key Zero Trust principles include:

→ Never trust, always verify

→ Least privilege access

→ Microsegmentation

→ Continuous monitoring and validation

→ Identity-based security

Zero Trust security operates on the principle of "never trust, always verify," requiring strict identity verification for every person and device attempting to access resources, regardless of their location. Implementing microsegmentation aligns with Zero Trust principles by dividing the network into isolated segments, thereby limiting lateral movement and reducing the attack surface.

→ In contrast, options A, C, and D reflect traditional security models that assume trust based on network location or initial authentication, which Zero Trust aims to eliminate.