A network security team observes phishing attacks on a user machine from a remote location.

A (Risk-based and adaptive access policies): After verifying user identity within a Zero Trust architecture, the next logical step is to apply continuous, adaptive risk-based policies that evaluate contextual factors (device posture, behavior, location, etc.) before granting access. This approach dynamically responds to threats such as phishing attacks by adjusting access permissions based on real-time risk.

Other options explained:

B/C/D: These are supporting mechanisms, but risk-based policies directly address dynamic attack mitigation.