CompTIA Network+ N10-009 (V9) Practice Question

Granting minimal necessary access to resources and data strictly based on the user's or device's role aligns best with the principle of least privilege, a fundamental component of Zero Trust Architecture. This practice ensures that each user or service can only access the systems critical for their specific functions. In contrast, multifactor authentication, while crucial for identity verification in a ZTA, does not by itself govern access scope or permissions. Similarly, encrypting data ensures confidentiality but does not limit resource accessibility based on the principle of least privilege. Scheduled vulnerability scans contribute to overall security hygiene but do not directly address access limitations based on roles or necessity.