CyberCertPrepSecurity FundamentalsSecurity PrinciplesEASYFree question
What is the core principle of the Zero Trust security model?
- A.Trust devices that have antivirus installed, and zero trust assumes every device inside the perimeter is already trusted
- B.Never trust, always verify - no user or device is automatically trusted regardless of location
- C.Trust all internal network traffic; privacy and security are interchangeable terms for one requirement
- D.Trust only encrypted traffic
Why B is correct
Zero Trust eliminates implicit trust based on network location. Every access request is verified (identity, device health, context) regardless of whether it originates inside or outside the network. Key principles: verify explicitly, use least privilege access, and assume breach.
Know someone studying for Security Fundamentals? Send them this one.