thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Intermediate

Zero Trust Architecture (ZTA)

Security model that assumes no implicit trust and continuously verifies every user, device, and request before granting access.

Definition

Zero trust, described in NIST SP 800-207, shifts protection from network perimeters to resources. Access is granted per session based on identity, device posture, and context, following least privilege and assuming breach. Core elements include strong identity, device health, microsegmentation, policy decision and enforcement points, and continuous monitoring.

Example

Instead of a VPN that grants full network access, employees reach each internal app through a ZTNA broker that checks identity and device compliance per request.

Exam tip

Zero trust means 'never trust, always verify'; network location alone never grants trust.

Related terms