The zero trust concept assumes that breaches will occur, and that while traditional network defenses have a role, each system, device, or component of the network must also be protected from other components. In other words, the network is designed without a presumption of trust and with a presumption that other devices may be malicious or compromised.

In a zero trust environment, actions are validated explicitly. That means that each action must be authorized by an authenticated user, service, or server. It also means that just because that authentication has happened before, does not mean it should be trusted or allowed to occur without reauthentication.

WRITE A DETAILED ANSWER FOR THE FOLLOWING QUESTION:

1. If a network is implemented for zero trust, can an attack on the network be successful? Why or why not?
2. Are zero trust and defense in depth the same thing? Explain your answer.