Study. uk . com
  1. Home
  2. All questions
  3. Question 606

CompTIA Security+ study material · question 606 of 611

Under zero trust, when is trust in a requester evaluated and with what privilege granted?

  1. Before access is granted, with the least privilege needed for the task
  2. At network admission, with segment-wide privileges
  3. At session start, with the privileges of the user's role
  4. After the first successful request, with cached privileges
Show the answer

Answer: A. Before access is granted, with the least privilege needed for the task

Evaluation precedes access and is scoped to the task, so a broad standing grant is exactly what the model avoids.

Source: NIST SP 800-207 (NIST) — SP 800-207 § 2.1 Tenets of Zero Trust

Challenge yourself on this topic → Study as cards