Connections approved by the Zero Trust Exchange must then enable permanent network-level access for at least 30 days.

This statement is false. A core principle of the Zero Trust model is to eliminate implicit trust and grant access on a least-privileged, per-session basis. The Zscaler Zero Trust Exchange brokers secure connections between a specific user and a specific application for a specific session only. It never provides broad or permanent network-level access. Each new access request is treated as unique and must be re-verified against policy, making the concept of long-term, persistent access antithetical to the architecture.

A. True

This option is incorrect because it describes a legacy, perimeter-based security model, which is the opposite of the ephemeral, per-request access model of Zero Trust.

1. Rose, S., et al. (2020). NIST Special Publication 800-207: Zero Trust Architecture. National Institute of Standards and Technology. p. 6, Section 2.1. "Zero trust architecture is a cybersecurity paradigm focused on resource protection... and the premise that trust is never granted implicitly but must be continually evaluated."

2. Zscaler. (n.d.). What is Zero Trust? Zscaler Resources. Retrieved from https://www.zscaler.com/resources/security-terms-glossary/what-is-zero-trust. "In a zero trust environment, no user or application is inherently trusted. Every access request is verified before being granted."