CompTIA Network+ N10-009 Practice Question

Granting minimal necessary access to resources and data strictly based on the user's or device's role aligns best with the principle of least privilege, a fundamental component of Zero Trust Architecture. This practice ensures that each stored credential or service can only access the systems critical for their specific functions. In contrast, multifactor authentication, while crucial for identity verification, does not by itself govern access scope or data permissions. Similarly, encrypting data ensures confidentiality but does not limit resource accessibility based on the principle of least privilege. Scheduled vulnerability scans contribute to overall security hygiene but do not directly address access limitations based on roles or necessity.