Which statement best embodies trust-centric security?

Enabling strict security policies describes a perimeter-centric enforcement approach focused on blocking attacks, not a trust-centric model based on continuous identity verification.

Using intelligence-based policy with detect, investigate, and remediate describes a threat-centric security model centered on incident response workflows, not the trust-verification philosophy of Zero Trust.

This option accurately captures the Zero Trust model's core tenet of 'never trust, always verify,' where access decisions are made by simultaneously evaluating users, devices, applications, and network location through identity-based policies. This multi-dimensional verification ensures that no single compromised element is sufficient to gain access, forming a comprehensive and context-aware trust decision.

Verifying access via MDM software alone is too narrow because trust-centric security requires verification across users, devices, applications, and locations together - mobile device management addresses only one dimension.