A Zero Trust network security model is based on which security principle?

Question

Options

• Adue diligence
• Bleast privilege
• Cnon-repudiation
• Dnegative control

• B
  91% (21)
• C
  4% (1)
• D
  4% (1)

Explanation

Zero Trust is built on least privilege because it assumes no user, device, or system should be inherently trusted - every access request must be verified, and each entity receives only the minimum permissions needed to perform its function, nothing more.

Why the distractors are wrong:

• A. Due diligence is a business/legal concept about performing adequate research before taking action - it describes a process, not a security architecture principle.
• C. Non-repudiation ensures actions can be traced and denied by no one (like digital signatures) - it's about accountability, not access control philosophy.
• D. Negative control is not a standard security principle; it's a distractor designed to sound plausible.

Memory tip: Think of Zero Trust as "never trust, always verify" - and least privilege is the mechanism that enforces this. If you trust nobody by default, you grant the least access possible to everyone. The word "least" maps directly to Zero Trust's core philosophy of minimizing the attack surface at every step.

No community discussion yet for this question.