ISC2 CISSP Practice Question

The core principle of a Zero Trust architecture is "never trust, always verify," which means that no user or device is trusted by default, regardless of its location on the network. The best implementation of this principle is to require that every access request be individually authenticated and authorized based on a dynamic assessment of user identity, device health, and other contextual factors. This approach, often enforced through micro-segmentation and granular access policies, directly addresses the goal of preventing lateral movement. Strengthening the perimeter firewall is a feature of traditional security models, which Zero Trust aims to move beyond. Security awareness training and encrypting data at rest are essential security controls, but they do not represent the fundamental architectural shift of Zero Trust, which is focused on dynamically verifying access in transit.