In zero-trust security, which concept helps minimize the risk by isolating workloads?

• A. Global broad access
• B. Micro-segmentation for every access request
• C. Perimeter-only defense
• D. Dark web monitoring

Answer: (B)

Isolating workloads through micro-segmentation is central to zero-trust design. It creates small, independently managed segments so traffic between workloads is controlled by strict policies. By requiring verification for every access request and enforcing least-privilege access, you cap how far an attacker can move inside the network, even if one component is compromised. Each communication is evaluated and restricted, reducing the blast radius and making disturbances easier to detect and contain.

Why the other ideas don’t fit: a model that allows broad, global access undermines isolation and trust is never assumed inside the network. A perimeter-only defense treats the outer edge as enough protection, but zero-trust assumes breaches can occur anywhere and internal traffic must be controlled. Dark web monitoring focuses on external threat intel and does not by itself isolate workloads or govern internal access.