CISSP Communication and Network Security Practice Question
A security architect is designing a zero-trust network. Which principle is fundamental to a zero-trust architecture (ZTA) such as BeyondCorp?
⚠ Common exam trap
Test-takers frequently confuse 'trust but verify' (a common security mantra) with zero-trust, but the key distinction is that zero-trust removes all implicit trust, including for internal users and devices.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Never trust, always verify
In a zero-trust architecture (ZTA) like Google's BeyondCorp, the foundational principle is 'never trust, always verify.' This means no entity—user, device, or network—is trusted by default, regardless of its location (inside or outside the corporate perimeter). Every access request must be authenticated, authorized, and continuously validated before granting access to resources, eliminating implicit trust based on network location.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Never trust, always verify
Why this is correct
Never trust, always verify requires every request to be authenticated and authorised based on identity, device posture and context, regardless of network location. This eliminates implicit trust from network position, the foundational principle underlying BeyondCorp's zero-trust architecture.
- ✗
Trust but verify
Why it's wrong here
Zero-trust replaces 'trust but verify' with continuous verification of every request regardless of prior trust. It is tempting because it sounds security-conscious and describes traditional perimeter defence, and would be correct where an established trusted zone is revalidated periodically rather than each access being independently authenticated and authorised.
- ✗
Trust internal users implicitly
Why it's wrong here
Implicit trust for internal users is exactly what zero-trust removes; BeyondCorp authenticates and authorises every user and device per request. It is tempting because legacy perimeter models assumed insider trust, and would apply where a hardened internal network segment is protected by firewalls and VPN alone.
- ✗
Trust network location as a primary factor
Why it's wrong here
Zero-trust treats network location as untrusted, so it cannot serve as a primary authentication factor; identity and device posture drive access instead. It is tempting because perimeter security historically relied on being inside the corporate network, and would be correct for a traditional castle-and-moat design.
Go deeper
Related to this question
About these practice questions
One of 816 original CISSP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISSP exam.