TechKnowSurge
CompTIA Security+ 1.2
TechKnowSurge Catalog Interactives Checked Once or Checked Continually?
InteractiveSecurityFree

Checked Once or Checked Continually?

A bouncer at the door, or checks that never stop? Sort each case as a one-time admission check or zero trust. Land five in a row.

⚑ Complete this interactive to capture a CTF flag worth 5 points.

About this interactive

Zero trust is a principle, never trust, always verify, and a set of technologies that support it. A traditional network works like the bouncer at a club. He checks your age and the list at the door, and once you are inside you are mostly left alone. 802.1X and NAC are door checks of this kind: they verify the user or machine before it joins, and then they stop. Zero trust keeps checking. In the lesson's example, Juan is promoted from sales to management. On a traditional network he keeps his sales access until he logs off and back on, because his access was decided at login. Under zero trust, the change takes effect on his next request. The lesson names the parts. Policy-driven access control checks each request against set criteria. Adaptive identity keeps assessing the user's and device's risk and adapts access to it. Threat scope reduction is the result: a device that falls out of compliance is cut off instead of trusted. To sort a card, ask whether anything is checked after the device or user is admitted.

What you'll learn

Aligned to

CompTIA Security+
1.2 Summarize fundamental security concepts.

Key terms

Zero Trust
A security model that assumes no user or device is trusted by default and requires continuous verification.
Adaptive Identity
A zero trust approach that continuously assesses user and device risk factors to dynamically allow or deny access to resources.
Policy-Driven Access Control
An access control approach in which defined policy criteria are continuously evaluated to determine whether a user or device is granted access to resources.
Network Access Control
NAC
Network Access Control enforces security policy on devices attempting to connect to a network, verifying compliance with posture requirements such as patch level, antivirus status, and certificate validity before granting access.

Topics

Interactive Streak Sort

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →