CyberCertPrepSecurity FundamentalsSecurity PrinciplesEASYFree question
What is the core philosophy behind zero trust security?
- A.Trust all internal network traffic by default
- B.Only trust traffic from known IP addresses
- C.Never trust, always verify - regardless of whether the user is inside or outside the network
- D.Zero security controls are needed if the network is properly segmented
Why C is correct
Zero trust operates on the principle of 'never trust, always verify.' It assumes that threats can come from anywhere, including inside the network. Every access request must be authenticated, authorized, and continuously validated regardless of the user's location or network position.
Know someone studying for Security Fundamentals? Send them this one.