Exam SY0-701 topic 1 question 94 discussion

Zero Trust is a security framework that aligns perfectly with the given requirements. It emphasizes strict access control, minimizing trust, and ensuring that all access requests are verified, making it an ideal choice for creating a secure environment.

The Zero Trust security model is based on the principle of “never trust, always verify.” It aligns with the given requirements: Provide a secure zone – Zero Trust micro-segmentation ensures that only authorized users and devices can access specific network areas. Enforce a company-wide access control policy – Zero Trust implements strict access controls using authentication and least privilege principles. Reduce the scope of threats – By assuming that threats exist inside and outside the network, Zero Trust reduces attack surfaces and prevents lateral movement by attackers. Zero Trust requires continuous authentication and authorization, using technologies such as multi-factor authentication (MFA), identity-based access controls, and network segmentation.

Why D. CIA is not correct: CIA (Confidentiality, Integrity, Availability): CIA is a security model that focuses on protecting data, but it is not a framework or architecture like Zero Trust. It does not directly address the requirements listed.

A. Zero Trust