In Zero Trust architecture, which principle best describes how a TA should handle access decisions?

• A. Always trust devices inside the network
• B. Centralize all authentication in one place
• C. Continuous verification of every access attempt
• D. Disable attestation after login

Answer: (C)

In Zero Trust, access decisions are based on continuous verification of every access attempt. The idea is that you never assume trust based on network location or a single login; the trusted agent continually re-evaluates who is trying to access what, from where, on what device, and under what conditions. This involves checking identity, device posture, context, and risk signals for each request, and adjusting or revoking access as conditions change. That ongoing, real-time validation is what keeps access tightly controlled and responsive to new threats or changes in posture.

Choosing continuous verification fits best because it embodies the constant re-assessment central to Zero Trust. In contrast, trusting devices simply because they’re inside a network contradicts the fundamental approach; centralizing authentication doesn’t capture the ongoing, context-aware evaluation; and disabling attestation after login removes the very mechanism that enables ongoing verification.