Remote assessors historically received broad trust to every sensitive appraisal app once their VPN connected. What access design best aligns with zero-trust principles?
Select an answer to reveal the explanation.
Short Explanation
Old-school VPN trust is like letting someone roam every locked office once they clear the lobby. Zero trust checks the badge, the laptop health, and the specific door—every time—not just the front gate.
Full Explanation
Zero trust assumes breach and requires explicit verification for each access decision. Network location or VPN membership alone is insufficient for sensitive applications; identity strength, device posture, and least-privilege authorization should be evaluated continuously. Standing admin rights and MFA removal increase remote risk.