What are the three main sections that the elements of Zero Trust are grouped into?

The elements of the Zscaler Zero Trust model are conceptually grouped into three main functional sections. The first is "Verify Identity and Context," which involves authenticating users and devices and assessing contextual factors like location and risk. The second is "Control Content and Access," where deep content inspection (like DLP and threat prevention) occurs and access is limited to specific applications, not the network. The third is "Enforce Policy," where dynamic, context-aware policies are applied to every access request to determine whether to grant or deny it.

B. VPNs, firewalls, and legacy architectures.

These are components of traditional, perimeter-based security models that a Zero Trust architecture is designed to replace or render obsolete.

C. Castle-and-moat security architectures, with the data center and inbound DMZ being key.

This describes the legacy security paradigm that Zero Trust directly opposes by assuming no trusted internal network.

D. Routers, switches, and wireless access points.

These are physical or virtual network infrastructure components, not the logical pillars of a Zero Trust security framework.

1. Zscaler. (2023). ZTCA Certification Study Guide. The guide's structure and content are organized around the principles of verifying identity, controlling access, and enforcing policy as the core functions of the Zero Trust Exchange.

2. Zscaler. (n.d.). The Zscaler Zero Trust Exchange. Zscaler Products. Retrieved from https://www.zscaler.com/products/zscaler-zero-trust-exchange. The platform's capabilities are described in terms of verifying identity, enforcing access policies, and inspecting traffic.