Apply Data Centric Zero Trust ZERO-TRUST-DESIGN Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company stores sensitive research data in Azure SQL Database. They need to encrypt the data at rest and in transit, and also protect specific columns containing personally identifiable information (PII) from being visible to unauthorized users. Which combination of features should they use?

   • AUse row-level security to restrict access to specific rows and enable TDE.
   • BImplement dynamic data masking to hide PII from unauthorized users and enable TDE.
   • CUse Always Encrypted for the PII columns and enforce TLS 1.2 for connections.
   • DEnable Transparent Data Encryption (TDE) and enforce TLS 1.2 for connections.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A company shares sensitive documents with external partners. They need to ensure that the documents are protected even after they are downloaded and shared further. They also need to revoke access immediately if a partner is compromised. Which solution should they implement?

   • AUse sensitivity labels with encryption and rights management, and configure the label to allow the organization to track and revoke access.
   • BStore the documents in a secure SharePoint site and share links with expiration dates.
   • CUse Azure Information Protection with a custom template that grants view-only access.
   • DUse a DLP policy to block external sharing of the documents.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the primary goal of Data Loss Prevention (DLP) controls in a Zero Trust architecture?

   • ATo provide backup and recovery for data
   • BTo manage user access to data
   • CTo encrypt all data in the organization
   • DTo monitor and prevent unauthorized data exfiltration
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   In a data-centric Zero Trust model, what is the primary purpose of granular access controls?

   • ATo monitor data movement across the network
   • BTo allow all users within the organization to access any data
   • CTo enforce least-privilege access based on user, device, and context
   • DTo encrypt data before it is stored
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A company has a highly regulated environment where data access must be restricted based on the user's role, device compliance, and risk level. They also need to audit all access attempts. They use Azure AD and Microsoft 365. Which solution provides the most comprehensive and auditable access control?

   • AUse Azure AD Privileged Identity Management to require approval for all access requests.
   • BEnable Azure AD Identity Protection to block risky sign-ins and require MFA for all users.
   • CDeploy Microsoft Defender for Cloud Apps to control all data access and generate alerts.
   • DImplement Azure AD Conditional Access policies that require MFA, device compliance, and risk-based access, and enable audit logging for all sign-ins and data access.
   Reveal Solution Discussion Select an answer first