Free CompTIA Security+ SY0-701 Practice Question

The Zero Trust Model focuses on continuously verifying users and devices before granting access, thereby reducing the attack surface by eliminating implicit trust. It enforces strict access policies based on identity, context, and risk assessment. Role-Based Access Control (RBAC) assigns permissions based on predefined roles without necessarily verifying each access request or reducing implicit trust. Discretionary Access Control (DAC) allows resource owners to grant access at their discretion, which may not enforce strict identity verification. Mandatory Access Control (MAC) enforces access based on classifications and clearances, not adaptively on identity and context.