Apply Automation and Orchestration ZERO-TRUST-DESIGN Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A Zero Trust environment requires that all security controls are continuously monitored and maintained. The team wants to automate the verification that firewall rules, access policies, and endpoint protections are correctly configured. What is the best approach?

   • ARely on the security team to periodically review configuration screenshots.
   • BUse automated configuration assessment tools that continuously check controls against a desired state and alert on drift.
   • CSet up a monthly report that lists all current configurations for manual review.
   • DConduct a manual audit of all controls once a year.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is an example of proactive maintenance of Zero Trust controls using automation?

   • AAutomatically updating firewall rules when a new threat is detected.
   • BManually reviewing access logs once a month.
   • CWaiting for a security breach to occur before updating policies.
   • DDisabling automation to avoid false positives.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company is implementing Zero Trust and wants to automate access decisions based on user role, device compliance, and real-time risk score. They have multiple applications, some on-premises and some in the cloud. What is the most effective way to enforce consistent access policies across all applications?

   • AImplement separate policy logic in each application to evaluate user role, device, and risk score.
   • BDeploy a centralized identity and access management (IAM) solution with a policy engine that integrates with all applications via standards like SAML or OIDC.
   • CCreate a single sign-on (SSO) portal but rely on each application to enforce its own access policies.
   • DUse a VPN to control access to all applications and enforce policies at the network level.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   In the context of Zero Trust security operations, what is the primary difference between automation and orchestration?

   • AAutomation is a manual process that uses scripts, while orchestration is a fully autonomous process that uses artificial intelligence.
   • BAutomation is used only for monitoring, while orchestration is used only for incident response.
   • CAutomation requires human approval for every action, while orchestration runs without any human oversight.
   • DAutomation executes a single task without human intervention, while orchestration coordinates multiple automated tasks into a cohesive workflow.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   How does automation and orchestration typically integrate with a SIEM platform?

   • ABy storing all logs directly in the orchestration tool instead of the SIEM.
   • BBy replacing the SIEM with a SOAR platform.
   • CBy receiving alerts from the SIEM and automatically executing response actions.
   • DBy manually copying alerts from the SIEM to the orchestration tool.
   Reveal Solution Discussion Select an answer first