Design a Zero Trust Network Architecture (ZTNA) for a hybrid cloud enterprise. Your plan must include device trust verification, continuous authentication, micro-segmentation strategies, and policy enforcement points. Explain how you would implement Identity and Access Management (IAM) policies that enforce least privilege access dynamically based on real-time risk scores.