Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
CompTIA Security+ · CompTIA
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Keyword " Secure Zone" and "Company - wide access"
The Zero Trust security model is based on the principle of “never trust, always verify.” It aligns with the given requirements: Provide a secure zone – Zero Trust micro-segmentation ensures that only authorized users and devices can access specific network areas. Enforce a company-wide access control policy – Zero Trust implements strict access controls using authentication and least privilege principles. Reduce the scope of threats – By assuming that threats exist inside and outside the network, Zero Trust reduces attack surfaces and prevents lateral movement by attackers. Zero Trust requires continuous authentication and authorization, using technologies such as multi-factor authentication (MFA), identity-based access controls, and network segmentation.
Why D. CIA is not correct: CIA (Confidentiality, Integrity, Availability): CIA is a security model that focuses on protecting data, but it is not a framework or architecture like Zero Trust. It does not directly address the requirements listed.