Zero Trust
Zero Trust assumes no implicit trust and verifies every request explicitly.
Updated: 2026-03-05
Definition
Zero Trust is a security model where no user, device, or network is automatically trusted.
Access decisions are based on identity, device posture, context, and continuous evaluation.
Key points
- Verify explicitly (identity + context)
- Use least privilege access
- Assume breach and segment aggressively
Common mistakes
- Thinking Zero Trust is a single product (it’s an architecture approach).
- Ignoring visibility and logging (you need data to enforce policies).
Related exams
Related terms
Want to practice this in exam-style questions?
Use the mini tests on each exam page, then continue in the app for offline packs and detailed explanations.
Go to exams