Zero Trust CNX-001 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   In a ZTNA model, how does access to an application typically occur?

   • AThe user authenticates and is granted access only to the specific application they are authorized to use.
   • BThe user is granted access to the entire subnet where the application resides.
   • CThe user's device is placed on the internal network and can discover all services.
   • DThe user connects to the corporate network via VPN and then accesses all internal resources.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company is adopting a SASE framework to simplify its security architecture. Currently, it uses separate solutions for secure web gateway (SWG), cloud access security broker (CASB), and zero trust network access (ZTNA). The goal is to reduce complexity and operational overhead. Which SASE benefit directly addresses this goal?

   • AImproved performance through local internet breakout at branch offices.
   • BConvergence of multiple security and networking functions into a single, cloud-delivered platform.
   • CIncreased security through the use of multiple independent security controls.
   • DEnhanced visibility into user activities across all cloud applications.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A global enterprise is deploying SASE to replace its MPLS network. The network team must ensure that latency-sensitive applications, such as VoIP and video conferencing, maintain high quality. They also need to enforce security policies consistently across all locations. Which SASE deployment consideration is most critical for this scenario?

   • AImplementing a hybrid approach with MPLS for latency-sensitive traffic and SASE for other traffic.
   • BConfiguring the SASE solution to route all traffic through a central data center for consistent policy enforcement.
   • CSelecting SASE points of presence (PoPs) that are geographically close to users and branch offices to minimize latency.
   • DUsing a single SASE provider for all locations to simplify management, even if it means higher latency in some regions.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which technology is commonly used to implement microsegmentation in a software-defined data center?

   • ASoftware-defined networking (SDN) with distributed firewalls.
   • BTraditional VLANs and ACLs.
   • CNetwork function virtualization (NFV)
   • DNetwork address translation (NAT).
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company is deploying zero trust network access (ZTNA) for its remote workforce. The security team wants to ensure that every access request is authenticated and authorized based on the user's identity and device posture, regardless of the user's location. Which approach best aligns with the core zero trust principle of 'never trust, always verify'?

   • AImplement a ZTNA solution that requires multi-factor authentication (MFA) for every access request and continuously validates device compliance before granting access to specific applications.
   • BDeploy a next-generation firewall (NGFW) at the network perimeter and rely on its intrusion prevention system (IPS) to block malicious traffic from remote users.
   • CEstablish a site-to-site VPN that allows remote users to access the entire corporate network after a single sign-on (SSO) event.
   • DUse a cloud access security broker (CASB) to log all user activities in cloud applications and generate reports for the security team to review.
   Reveal Solution Discussion Select an answer first