1.8 Describe Zero Trust Architecture 350-701 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is a common challenge when implementing zero trust architecture in an existing enterprise?

   • AReducing the number of security tools
   • BEliminating the need for user authentication
   • CIntegrating with legacy applications that do not support modern authentication protocols
   • DSimplifying network segmentation by removing all firewalls
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   In a zero trust architecture, the policy decision point (PDP) determines that a user's request for an application should be denied because the user's device is not compliant with the security policy. What should happen next?

   • AThe user is prompted to re-authenticate with multi-factor authentication.
   • BThe policy enforcement point (PEP) blocks the user's traffic to the application.
   • CThe application server itself rejects the user's request.
   • DThe user's device is automatically quarantined and all its traffic is blocked.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A hospital is implementing zero trust. They need to ensure that a doctor's tablet can access patient records only when it is on the hospital's managed network and the doctor has been authenticated. The security team is configuring the policy decision point (PDP) to evaluate these conditions. Which set of signals is the PDP primarily analyzing?

   • AApplication version, data classification, and user role
   • BFirewall rules, IPS signatures, and antivirus definitions
   • CUser identity, device posture, and network location
   • DTime of day, user location, and data sensitivity
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A global company is implementing a zero trust architecture. They have a mix of legacy on-premises applications that use hardcoded IP addresses for inter-server communication and modern cloud-native applications. The security team wants to apply micro-segmentation across the entire environment. What is the most significant challenge they will face?

   • AMicro-segmentation requires the deployment of a new physical firewall at every network segment boundary.
   • BThe legacy applications' hardcoded IP addresses make it difficult to create dynamic, identity-based policies that are a hallmark of micro-segmentation.
   • CThe main challenge is that micro-segmentation cannot be used with on-premises infrastructure, only in the cloud.
   • DThe cloud-native applications cannot be protected by micro-segmentation because they are outside the corporate network.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   How does zero trust architecture differ from traditional perimeter-based security?

   • AZero trust assumes no implicit trust and verifies every access request.
   • BZero trust trusts all users inside the network by default.
   • CZero trust relies on a strong network perimeter to protect internal resources.
   • DZero trust only applies to cloud environments.
   Reveal Solution Discussion Select an answer first