Identity is a binary decision, not to be revisited. Once a decision is made about who, what, and where, that is final for at least 48 hours.

This statement is false. A core tenet of Zero Trust is the continuous, dynamic assessment of identity and context. Access decisions are not binary or static; they are re-evaluated in real-time based on changing signals like user behavior, device posture, location, and the application being requested. Granting long-lived, static trust for any period, such as 48 hours, would create a significant security vulnerability that is antithetical to the "always verify" principle. Trust is ephemeral and must be continuously earned for every single access request.

This question is a True/False statement. The statement is definitively false (B), as Zero Trust relies on continuous verification, not static, long-term trust decisions. Option A (True) would be incorrect as it contradicts the fundamental principles of Zero Trust.

1. Zscaler. (n.d.). What is Context-Based Access Control? Zscaler Resources. Retrieved from https://www.zscaler.com/resources/what-is-context-based-access-control. The article states, "With a zero trust approach, access is granted based on the principle of least privilege and is continuously assessed based on context."

2. Zscaler. (n.d.). The Zscaler Zero Trust Exchange. Zscaler Products. Retrieved from https://www.zscaler.com/products/zero-trust-exchange. The architecture is described as providing "dynamic, identity- and context-aware policy enforcement." This confirms that decisions are not static.