1.8 Describe Zero Trust Architecture 350-701 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A network administrator is explaining the shift to zero trust to a colleague. The colleague argues that the company's strong perimeter firewall and VPN are sufficient because they keep the internal network safe. Which statement best refutes the colleague's argument by highlighting the fundamental flaw in the perimeter-based approach?

   • AVPNs are slow and create a poor user experience for remote workers.
   • BThe perimeter firewall cannot inspect encrypted traffic, so it is blind to modern attacks.
   • CPerimeter firewalls are becoming too expensive to maintain and upgrade.
   • DOnce an attacker breaches the perimeter, they have free lateral movement and access to all internal resources.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A security architect is designing a zero trust architecture for a financial services firm. The firm needs to ensure that only approved corporate laptops can access the internal trading application, and that access is granted based on the user's role and the sensitivity of the data being accessed. Which combination of zero trust pillars is the architect primarily addressing?

   • AIdentity, Device, and Data
   • BDevice and Network
   • CNetwork and Application
   • DIdentity and Device
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which statement best describes the core principle of a zero trust architecture?

   • ATrust is never assumed and must be verified for every access attempt.
   • BTrust is granted once and then continuously verified for every access request.
   • CTrust is based on the strength of the user's password alone.
   • DTrust is established based on the user's location within the corporate network.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A security analyst is comparing zero trust to the traditional castle-and-moat model. In the traditional model, the 'moat' is the firewall, and everything inside is trusted. In zero trust, what replaces the concept of the 'moat'?

   • AA demilitarized zone (DMZ) that hosts all public-facing services.
   • BA comprehensive identity and access management (IAM) system that verifies every user and device.
   • CA set of granular policies enforced at multiple points, verifying every access request regardless of location.
   • DA single, more powerful firewall that inspects all traffic.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company wants to adopt zero trust but has a limited budget and wants to start with the highest-impact change. They currently rely on a VPN for remote access and have a flat internal network. Which approach aligns with the 'enhanced identity' zero trust deployment model?

   • APurchasing new hardware firewalls for every branch office to enforce consistent policies.
   • BDeploying a next-generation firewall to segment the internal network into multiple zones.
   • CImplementing multi-factor authentication (MFA) and single sign-on (SSO) for all users accessing corporate applications.
   • DReplacing the VPN with a zero trust network access (ZTNA) solution that provides per-application access.
   Reveal Solution Discussion Select an answer first