Which concept is a legitimate paradigm of zero trust?

a$.$ Enable authentication of a user automatically on the condition that the user's device is authenticated

b$.$ Aim network defenses at wide perimeters exclusively

c$.$ Access to data resources is granted when the resource is required

d$.$ Implicit trust is granted weekly to systems that are inside the physical perimeter