nerdexam
Isaca

CISM · Question #408

Which of the following is a fundamental principle for controlling access within a Zero Trust security model?

The correct answer is A. Authentication verification. A Zero Trust security model operates on the principle of "never trust, always verify." This means that access must be continuously verified through strong authentication mechanisms, such as multi-factor authentication (MFA) and identity verification, before granting or…

Submitted by asante_acc· Apr 18, 2026Information Security Program Development and Management

Question

Which of the following is a fundamental principle for controlling access within a Zero Trust security model?

Options

  • AAuthentication verification
  • BPerimeter defense
  • CNetwork segmentation
  • DPassword complexity

How the community answered

(69 responses)
  • A
    90% (62)
  • B
    6% (4)
  • C
    1% (1)
  • D
    3% (2)

Explanation

A Zero Trust security model operates on the principle of "never trust, always verify." This means that access must be continuously verified through strong authentication mechanisms, such as multi-factor authentication (MFA) and identity verification, before granting or maintaining access to resources. Unlike traditional perimeter-based security models, Zero Trust assumes that threats could exist both inside and outside the network, making continuous authentication verification a fundamental requirement.

Topics

#Zero Trust#Access Control#Authentication#Security Models

Community Discussion

No community discussion yet for this question.

Full CISM Practice