Which security model emphasizes strict identity verification and microsegmentation regardless of network location?

• A. Zero Trust Architecture
• B. Perimeter-Based Firewall
• C. Access Control List
• D. Public Key Infrastructure

Answer: (A)

Zero Trust focuses on explicit identity verification for every access request and on microsegmentation to restrict what each authenticated user or device can access, no matter where the request comes from on the network. In this model, there’s no assumption of trust based on being inside a network perimeter; access decisions are made continuously using the user’s identity, device health, and context, with least-privilege permissions and strict segmenting of resources. This means you can’t move laterally freely once inside the network—you must be verified again for each resource access, and policies are enforced at the resource level rather than just at the network edge. Perimeter-based firewalls rely on a trusted internal network after crossing an external boundary and don’t inherently enforce continuous verification or microsegmentation. Access control lists are simple allow/deny rules attached to resources and don’t provide the ongoing, context-aware verification that Zero Trust requires. Public Key Infrastructure deals with certificates for authentication but doesn’t by itself define the overarching access model or microsegmentation strategy.