CyberCertPrepSecurity FundamentalsSecurity PrinciplesEASYFree question
What is the core philosophy behind zero trust security?
- A.Only trust traffic from known IP addresses
- B.Zero security controls are needed if the network is properly segmented; zero trust assumes every device inside the perimeter is already trusted
- C.Never trust, always verify - regardless of whether the user is inside or outside the network
- D.Trust all internal network traffic by default; privacy and security are interchangeable terms for one requirement
Why C is correct
Zero trust operates on the principle of 'never trust, always verify.' It assumes that threats can come from anywhere, including inside the network. Every access request must be authenticated, authorized, and continuously validated regardless of the user's location or network position.
Know someone studying for Security Fundamentals? Send them this one.