Eric, a cloud security engineer, implements a technique for securing the cloud resources used by his organization. This technique assumes by default that a user attempting to access the network is not

Serverless computing is a cloud execution model where the provider abstracts server management so developers deploy functions without provisioning infrastructure; it is not a network access verification or trust model.

A Demilitarized Zone segments the network into an intermediate buffer between untrusted external and trusted internal zones using perimeter-based trust, which is the legacy model that Zero Trust was designed to replace.

Container technology packages applications with their dependencies into portable, isolated units to ensure consistent deployment; it is an infrastructure and runtime tool with no inherent access verification or trust policy enforcement.

Zero Trust operates on the core principle of 'never trust, always verify,' meaning every incoming connection is authenticated and authorized regardless of network location or prior session state. Combining this with role-based least-privilege access - restricting employees to only the resources their role requires - precisely matches the technique Eric implemented, as both continuous verification and least-privilege are foundational Zero Trust pillars defined in NIST SP 800-207.