In short
Zero trust is a security model that grants no automatic trust based on network location. Every access request is authenticated, authorized and limited to the minimum needed.
Key takeaways
- It replaces the traditional 'trusted internal network' perimeter model.
- It relies on strong identity verification, device checks and least privilege.
- It suits cloud services and remote work.
Where it's tested
ISC: Information Security Fundamentals — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
Which statement best describes a zero trust security model?