* The concept of Zero Trust is based on the principle of never trust, always verify. It means that every request for accessing network resources, regardless of where it originates from, must be authenticated and authorized before granting access12.
* Zero Trust is different from SSO (single sign-on), which allows users to log in once and access multiple applications without re-authenticating3. SSO simplifies the user experience, but does not provide the same level of security as Zero Trust.
* Zero Trust is also different from VPN (virtual private network), which creates a secure tunnel between a remote device and a network, encrypting the traffic and hiding the device's IP address4. VPN provides privacy and protection from external threats, but does not verify the identity and permissions of the device or user accessing the network.
* Zero Trust is also different from role-based access control (RBAC), which assigns permissions to users or groups based on their roles and responsibilities5. RBAC helps to enforce the principle of least privilege, but does not verify the context and conditions of each access request.
* Therefore, the best answer is B. Zero Trust, which requires authentication and authorization for each application access, regardless of the source or location of the request.
References:
* 1: What is Zero Trust? A model for more effective security | CSO Online
* 2: CompTIA Network+ N10-008 Certification Study Guide, page 472
* 3: [What is Single Sign-On (SSO)? - Definition from WhatIs.com]
* 4: [What is a VPN? | Virtual Private Networks Explained | Norton]
* 5: [What is Role-Based Access Control (RBAC)? - Definition from Techopedia]