Exam CAS-004 topic 1 question 259 discussion

To achieve a zero trust architecture, the following measures will need to be implemented: Least privilege: The principle of least privilege should be applied to ensure that users and devices only have access to the resources they need to perform their functions. This involves granting the minimum level of access required and then gradually increasing access privileges as needed. Policy automation: Policies for access control, authentication, and authorization should be automated to reduce the risk of human error and to ensure that policies are consistently applied across the organization. Continuous validation: Continuous monitoring and validation of user and device behavior is necessary to detect and respond to any anomalies or suspicious activity that may indicate a security breach.

PKI is the only option that directly addresses the need for one time authentication.

Source: Verifying each answer against Chat GPT, my experience, other test banks, a written book, and weighing in the discussion from all users to create a 100% accurate guide for myself before I take the exam. (It isn't easy because of the time needed, but it is doing my diligence)

A and F, but I'm wondering if PKI is also a good option.

A C F Look okay