What is the Zero Trust security model, and what is its core principle that differs from traditional perimeter-based security?

• A.Zero Trust: 'never trust, always verify' - every access request is authenticated, authorized, and continuously validated regardless of network location (internal or external). Traditional perimeter security assumes devices inside the network perimeter are trusted. Zero Trust eliminates this assumption: a compromised internal host receives no implicit trust, and every resource access requires explicit authentication and authorization
• B.Zero Trust is a firewall architecture that places a firewall between every pair of VLANs; it has no relation to authentication
• C.Zero Trust means all user passwords must be reset to zero (empty); multi-factor authentication replaces passwords entirely
• D.Zero Trust is a regulatory compliance framework equivalent to PCI-DSS but focused on cloud environments