Web Security · Senior · Question 3 of 75
What is the core idea of zero trust architecture?
- 1No employee is allowed to access production
- 2All traffic is blocked by default and nothing is ever allowed
- ✓Correct answer: No implicit trust based on network location: every request is authenticated and authorized
Explanation
Being inside the VPN or cluster doesn't make a call trusted. Services check identity and permissions on each request.