TheZero Trust modelenforces the principle ofnever trust, always verifyby requiring continuous authentication and strict access controls, even within the network.
* Continuous Authentication:Users and devices must consistently prove their identity.
* Least Privilege:Access is granted only when necessary and only for the specific task.
* Micro-Segmentation:Limits the potential impact of a compromise.
* Monitoring and Validation:Continually checks user behavior and device integrity.
Incorrect Options:
* A. Security-in-depth model:Not a formal model; more of a general approach.
* B. Layered security model:Combines multiple security measures, but not as dynamic as Zero Trust.
* D. Defense-in-depth model:Uses multiple security layers but lacks continuous authentication and verification.
Exact Extract from CCOA Official Review Manual, 1st Edition:
Refer to Chapter 4, Section "Zero Trust Security," Subsection "Principles of Zero Trust" - The Zero Trust model continuously authenticates and limits access to minimize risks.