Question

Your organization is adopting a Zero Trust security model. The security architect wants to ensure that if an attacker compromises a single account or workload, the damage is contained and cannot spread freely across the environment. Which Zero Trust guiding principle most directly addresses this goal, and what practical control best supports it?

Accepted Answer

Assume breach — segment access and apply least-privilege with micro-segmentation to limit lateral movement

Answer

Verify explicitly — enforce MFA on every sign-in attempt

Answer

Use least privilege — grant all users the Global Reader role by default

Answer

Verify explicitly — require a verified custom domain before sign-in