What does ZTNA stand for?
ZTNA stands for Zero Trust Network Access. Zero trust network access: grants access to individual applications after verifying user and device, instead of placing the user on the whole network as a VPN does.
ZTNA gives a user access to one specific application after checking identity, device health and context, and it repeats those checks instead of trusting the session for ever. The user is never placed on the network, so there is nothing else to scan or move to. It applies the zero trust principle that location on the network grants no trust by itself.
ZTNA in practice: an example
A contractor needs the invoicing application and nothing else. With ZTNA she signs in with MFA from a compliant laptop and reaches only that application. If her laptop later fails a health check, access stops. On the old VPN she would have had an address on the internal network and a path to every server.
What ZTNA is confused with
ZTNA vs VPN: what is the difference?
A VPN extends the network to the user and then relies on internal controls. ZTNA connects the user to a single application and keeps verifying. What VPN stands for
ZTNA vs SASE: what is the difference?
ZTNA is one of the services inside a SASE offering. What SASE stands for
Which exams cover ZTNA?
ZTNA is on the official CompTIA acronym list for one of the four exams covered here.
- CySA+ CS0-004: 1.1 (Security Operations).
Each number is a CompTIA exam objective and the name in brackets is its domain. The exam puts the term in a scenario; it does not ask you to recite the expansion.
Check yourself: two practice questions
Written by CertSprint for this page. They are not taken from any exam.
1. A company wants a supplier to use one internal application without being able to reach anything else on the network. What fits best?
- A site-to-site VPN
- ZTNA
- A shared administrator account
- Port forwarding to the server
Show the answer
B. ZTNA. ZTNA grants access per application and never joins the user to the network. A VPN would expose the network segment.
2. Which statement reflects the zero trust principle behind ZTNA?
- Devices inside the office are trusted
- Trust is never granted on network location alone
- Once signed in, a user is trusted for the day
- Firewalls are no longer needed
Show the answer
B. Trust is never granted on network location alone. Zero trust evaluates each request on identity, device and context. Being on the internal network earns nothing.
Sources: NIST glossary: zero trust network access; NIST SP 800-207, Zero Trust Architecture. The acronym and its expansion come from CompTIA's official acronym lists, linked from each exam glossary above. The explanation, example and questions are CertSprint's own, checked against these sources on 11 November 2026.