Which statement describes Zero Trust Security?

Question

Options

• ACompanies must apply the same access controls to all users, regardless of identity.
• BCompanies that support remote workers cannot achieve zero trust security and must determine if
• CCompanies should focus on protecting their resources rather than on protecting the boundaries of
• DCompanies can achieve zero trust security by strengthening their perimeter security to detect a

• A
  5% (1)
• B
  5% (1)
• C
  90% (18)

Explanation

Zero Trust rejects the old "castle-and-moat" model where everything inside the network is trusted by default. Instead, it shifts focus to protecting resources (data, apps, services) directly - verifying every request regardless of where it originates, which is exactly what C describes.

Why the distractors fail:

• A is the opposite of Zero Trust - ZT enforces least-privilege, identity-aware access, not uniform access for all users.
• B is a misconception; Zero Trust was designed for environments with remote workers and cloud resources - no physical perimeter required.
• D contradicts the core premise - Zero Trust explicitly abandons perimeter-strengthening as the primary strategy, because it assumes breaches will happen and the perimeter cannot be fully trusted.

Memory tip: The name is a mantra - trust zero things by default. Flip the old model: instead of "trust inside, block outside," ZT says "verify everything, protect the resource itself, not the fence around it."

No community discussion yet for this question.