Which cybersecurity principle focuses on least privilege, device validation, multi-factor authentication, and micro-segmentation to enhance access control?

Which cybersecurity principle focuses on least privilege, device validation, multi-factor authentication, and micro-segmentation to enhance access control?

• A. Zero Trust Network Access Principles
• B. DOD Zero Trust Strategy Goals
• C. Perimeter Security
• D. Federal Risk and Authorization Management Program (FedRAMP)

Answer: (A)

Zero Trust Network Access Principles center on not trusting anyone by default and requiring verification for every access request. The elements described—least privilege to grant only the minimum access needed, device validation to ensure endpoints meet security requirements, multi-factor authentication to strengthen identity proof, and micro-segmentation to limit lateral movement—are the core controls used to enforce strict access decisions under a Zero Trust model. This approach emphasizes continuous verification, identity and device posture, and fine-grained access controls, rather than relying on a trusted boundary. Perimeter security focuses on defending the outer boundary and often assumes internal networks are trustworthy, which doesn’t align with the continuous verification and micro-segmentation emphasis. FedRAMP is a cloud security authorization framework, not the specific access-control principle described. The DOD Zero Trust Strategy Goals relate to strategic objectives rather than the practical access-control mechanism shown here.

Zero Trust Network Access Principles center on not trusting anyone by default and requiring verification for every access request. The elements described—least privilege to grant only the minimum access needed, device validation to ensure endpoints meet security requirements, multi-factor authentication to strengthen identity proof, and micro-segmentation to limit lateral movement—are the core controls used to enforce strict access decisions under a Zero Trust model. This approach emphasizes continuous verification, identity and device posture, and fine-grained access controls, rather than relying on a trusted boundary.

Perimeter security focuses on defending the outer boundary and often assumes internal networks are trustworthy, which doesn’t align with the continuous verification and micro-segmentation emphasis. FedRAMP is a cloud security authorization framework, not the specific access-control principle described. The DOD Zero Trust Strategy Goals relate to strategic objectives rather than the practical access-control mechanism shown here.