CyberCertPrepSecurity FundamentalsSecurity PrinciplesEASYFree question
What is the core principle of the Zero Trust security model?
- A.A. Trust all internal network traffic
- B.B. Never trust, always verify - no user or device is automatically trusted regardless of location
- C.C. Trust only encrypted traffic
- D.D. Trust devices that have antivirus installed
Why B is correct
Zero Trust eliminates implicit trust based on network location. Every access request is verified (identity, device health, context) regardless of whether it originates inside or outside the network. Key principles: verify explicitly, use least privilege access, and assume breach.
Know someone studying for Security Fundamentals? Send them this one.