Zero Trust Architecture

Name:

Date:

Class:

Quick Questions

Shade in the A or B circle for each question.

1. Does Zero Trust trust users by default?

A No

B Yes

2. Are internal network users automatically trusted?

A Yes, always trusted

B No, they're still checked

3. Does Zero Trust rely mainly on a strong perimeter?

A Yes

B No

4. Is verification a one-time event in Zero Trust?

A No, it's continuous

B Yes, it's one-time

5. Can a device be trusted forever once verified?

A No

B Yes

Match the Pairs

Draw a line connecting each item on the left to its match on the right.

Left column		Right column
1Zero Trust Architecture		AInternal traffic is still checked
2Continuous verification		BZero Trust rejects this assumption
3No default trust for insiders		CWrong - location never grants trust in Zero Trust
4Perimeter security assumes inside is safe		DChecking access again and again, not just once
5Once verified, a device is trusted forever		EA model that verifies every request, trusting nothing by default
6Being inside the network grants automatic access		FWrong - Zero Trust requires ongoing re-verification

Definitions

Zero Trust Architecture

Fill in the Blanks

Complete each line of code by filling in the missing parts.

Zero Trust never trusts by _______

Every request is ________ before access

Trust is never granted by _______

Inside the network is not _____________ safe

Access is checked ____________ over time

Spot the Error

Shade in the letter of the line that contains an error.

Question 1

A Trust is given by default

B Every request is checked

C Users are verified always

D No one is trusted blindly

Question 2

A Zero Trust checks requests

B Internal traffic is skipped

C Access needs verification

D Trust is continuously earned

Question 3

A No device is trusted first

B Every access needs a check

C A firewall alone is enough

D Verification happens always

Question 4

A Zero Trust verifies identity

B Devices are checked each time

C Access is granted continuously

D Internal users skip all checks

Question 5

A Zero Trust assumes no trust

B Every request needs a check

C Devices are verified always

D Access is granted case by case

E Trust never needs checking

Answer Key

Zero Trust Architecture

Section A: Quick Questions

A — No

B — No, they're still checked

B — No

A — No, it's continuous

A — No

Section B: Match the Pairs

Zero Trust Architecture → A model that verifies every request, trusting nothing by default

Continuous verification → Checking access again and again, not just once

No default trust for insiders → Internal traffic is still checked

Perimeter security assumes inside is safe → Zero Trust rejects this assumption

Once verified, a device is trusted forever → Wrong - Zero Trust requires ongoing re-verification

Being inside the network grants automatic access → Wrong - location never grants trust in Zero Trust

Section C: Definitions

Zero Trust Architecture — A security model that trusts no user or device by default and verifies every request, even from inside the network.

Section D: Fill in the Blanks

Zero Trust never trusts by default

Every request is verified before access

Trust is never granted by default

Inside the network is not automatically safe

Access is checked continuously over time

Section E: Spot the Error

A — Zero Trust never grants trust by default - every request must be verified.

B — Zero Trust checks internal traffic too - nothing is automatically skipped.

C — Zero Trust holds that a firewall alone is not enough - every request still needs verification.

D — Internal users are not exempt - Zero Trust checks them just like everyone else.

E — Zero Trust requires constant checking - trust is never assumed without verification.