1.8 Describe Zero Trust Architecture 350-701 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   In a traditional perimeter-based security model, what is the primary trust boundary?

   • AThe network perimeter
   • BThe user's identity
   • CThe data classification
   • DThe application layer
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   In a zero trust architecture, what is the role of a policy decision point (PDP)?

   • AIt enforces access decisions by allowing or blocking traffic.
   • BIt encrypts all data in transit between users and resources.
   • CIt makes access decisions based on policies and contextual signals.
   • DIt stores user credentials and authentication tokens.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A multinational corporation is implementing zero trust. They have a diverse user base, including employees, contractors, and partners, each with different access needs. They also have a mix of IT-managed and BYOD devices. The security team is struggling to define a single, unified access policy. What is the primary challenge they are facing?

   • AZero trust architecture cannot be applied to contractors and partners because they are external users.
   • BBYOD devices cannot be secured and must be banned from the network for zero trust to work.
   • CThe main challenge is that zero trust requires all applications to be moved to the cloud.
   • DThe complexity of managing a heterogeneous environment with diverse user types, device postures, and access requirements makes it difficult to create a consistent, enforceable policy.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which zero trust deployment model emphasizes strong authentication and continuous verification of user identity?

   • AMicro-segmentation
   • BData-centric security
   • CEnhanced identity
   • DNetwork infrastructure
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   An organization is implementing a zero trust architecture. The security team has defined a policy that grants access to a specific application only if the user's identity is verified, the device is compliant, and the request originates from a trusted IP range. Where should this policy be enforced to ensure it is applied consistently to every access attempt?

   • AAt the policy enforcement point, which sits in the data path and allows or denies traffic based on the policy decision point's verdict.
   • BAt the network firewall, which filters traffic based on IP addresses and ports.
   • CAt the identity provider, which authenticates the user and issues the token.
   • DAt the policy decision point, which evaluates the signals and makes the allow or deny decision.
   Reveal Solution Discussion Select an answer first