Objective 1.2

SY0-701

Summarize fundamental security concepts

Objective 1.2 sits in General Security Concepts, which carries 12% of the Security+ exam. The questions below are original, written from the official objective title above, and each explanation cites the CompTIA page it rests on.

Objective title verbatim from the official objectives. CompTIA exam page ↗

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

1-2General Security Concepts

Your company is replacing a flat corporate network where anything on the inside was allowed to reach the file servers. The new architecture follows Zero Trust. Which rule governs every access request now?

Trust all internal network traffic, verify only external requestsDescribes a perimeter-based model where internal traffic is assumed safe, the opposite of Zero Trust.
Never trust any request, and always verify it before granting accessCorrect · your answerCorrect. Nothing is presumed safe; verification precedes every grant.
Verify identity once at login, then trust for the entire sessionDescribes a one-time verification model, which Zero Trust replaces with continuous verification.
Grant broad access by default, then restrict after a breach occursDescribes trust-by-default followed by reactive restriction, which Zero Trust replaces with trust-by-exception.

Correct.

Checked against learn.microsoft.com, July 2026

Concept

Every security model rests on an assumption about who deserves confidence at the outset. Older designs extend it by network position; the modern replacement withholds it until each individual attempt proves itself, every time, from anywhere.

Why B

The foundation is the removal of default confidence. Nothing is presumed safe for sitting on the corporate network, and each attempt is authenticated and authorized on its own merits.

Source

Zero Trust is a modern security approach based on a simple idea: never trust, always verify.

Microsoft Learn: Zero Trust security model, checked July 2026
#zero trust#fundamental concepts

Now you: objective 1.2 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

1-2General Security Concepts

Traditional security models assume that assets inside the network perimeter are inherently safer than those outside. Which model directly challenges this assumption?

Sample question 2 of 3

1-2General Security Concepts

A team defines the strategy, architecture, processes, and controls for identity and data security as part of a Zero Trust rollout. Which structured adoption component does this describe?

Sample question 3 of 3

1-2General Security Concepts

An employee argues that because their laptop is company issued, no additional verification should be required when connecting remotely. Which Zero Trust concept most directly counters this argument?

That’s 3 of the full Security+ bank.

Keep going free: 10 questions per certification in bank practice, with no account.

Continue practicing

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in General Security Concepts