Question
An analyst is evaluating the implementation of Zero Trust principles within the data plane. Which of the following would be most relevant for the analyst to evaluate?
- A. Secured zones
- B. Subject role Correct
- C. Adaptive identity
- D. Threat scope reduction
Explanation
In the CompTIA Security+ Zero Trust model, the data plane covers the subject or system requesting access, the implicit trust zones it moves through, and the policy enforcement point, so evaluating the subject's role relates to the data plane. Adaptive identity and threat scope reduction are listed under the control plane, along with policy-driven access control, the policy engine and the policy administrator, which make the access decisions rather than carry the traffic.
