nerdexam
CompTIACompTIA

CS0-003 · Question #461

CS0-003 Question #461: Real Exam Question with Answer & Explanation

The correct answer is A: Network segmentation to separate sensitive systems from the rest of the network.. Network segmentation supports zero-trust principles by ensuring sensitive systems are isolated and access is restricted based on identity, role, and context. Unlike traditional models, zero-trust architecture does not automatically trust authenticated users or internal network tr

Submitted by mateo_ar· Mar 6, 2026Security operations

Question

An organization is planning to adopt a zero-trust architecture. Which of the following is most aligned with this approach?

Options

  • ANetwork segmentation to separate sensitive systems from the rest of the network.
  • BWhitelisting specific IP addresses that are allowed to access the network.
  • CTrusting users who successfully authenticate once with multifactor authentication.
  • DAutomatically trusting internal network communications over external traffic.

Explanation

Network segmentation supports zero-trust principles by ensuring sensitive systems are isolated and access is restricted based on identity, role, and context. Unlike traditional models, zero-trust architecture does not automatically trust authenticated users or internal network traffic. It enforces strict access controls to minimize risk.

Topics

#zero trust#network segmentation#least privilege#access control

Community Discussion

No community discussion yet for this question.

Full CS0-003 PracticeBrowse All CS0-003 Questions