According to the CIA triad principles for network security design, which principle should be priority for a Zero Trust network?

Data-in-motion encryption and 2FA address Confidentiality and authentication in transit but do not address protecting the stored identity credentials that the Zero Trust verification chain depends on.

Zero Trust is built on the assumption that no user, device, or credential store can be implicitly trusted; encrypting user identification data at rest within VPN termination hardware ensures that even if the hardware is physically or logically compromised, stored credentials remain confidential and cannot be harvested to bypass the 'always verify' requirement central to Zero Trust.

Categorization of systems, data, and BYOD assets is an asset-inventory practice that supports Zero Trust scoping but does not directly map to prioritizing a specific CIA triad principle.

High-availability access from defined zones addresses the Availability principle, which is secondary in Zero Trust - the model prioritizes strict identity verification over broad uninterrupted access.