In a data rights management solution, what does setting an access expiration on a document accomplish?

It allows anyone to access the document after the expiration date

It permanently deletes the document from all storage locations

It encrypts the document with a stronger algorithm

It restricts access to the document after a specified date

In a Zero Trust architecture, what is the primary purpose of encrypting data in transit?

To ensure data is only accessible from within a private network

To prevent data from being stored on disk

To allow data to be shared without any access controls

To protect data from unauthorized access while it is being transmitted over a network

What is the goal of integrating data-centric policies across the infrastructure in a Zero Trust architecture?

To ensure all data is stored in a single location

To ensure consistent enforcement of data protection regardless of where the data resides

To simplify the network infrastructure by removing all firewalls

To allow data to be accessed without any authentication

A security team needs to detect data exfiltration attempts in real-time. They have a large volume of data access logs from various sources. They want to use a SIEM solution to correlate events and alert on suspicious patterns. Which solution should they use?

Use Microsoft Defender for Cloud to monitor security configurations and generate alerts.

Use Azure Sentinel to ingest logs from Azure AD, Office 365, and other sources, and create analytics rules to detect anomalies.

Use Azure Monitor to collect logs and create alert rules for specific events.

Use Azure AD Identity Protection to detect risky sign-ins.

A legal firm shares confidential documents with external counsel. They need to ensure that the documents cannot be forwarded, printed, or accessed after 90 days. Which technology should they use?

Use a DLP policy to block external sharing of the documents.

Apply a sensitivity label with encryption and set the document permissions to 'Do Not Forward' and an expiration date.

Use Azure Information Protection with a custom template that grants read-only access and no expiration.

Store the documents in a SharePoint site with external sharing disabled.

Dell Zero Trust Design

Domain 5Objective 2

Apply Data Centric Zero Trust ZERO-TRUST-DESIGN Practice Questions (Page 2)

Part of the Data Centric Zero Trust domain, which accounts for 10% of the ZERO-TRUST-DESIGN exam.

28questions here

6free pages

7concepts

10%of the exam

Questions 6–10

6foundation · easy
In a data rights management solution, what does setting an access expiration on a document accomplish?
Select an answer first
7foundation · easy
In a Zero Trust architecture, what is the primary purpose of encrypting data in transit?
Select an answer first
8foundation · easy
What is the goal of integrating data-centric policies across the infrastructure in a Zero Trust architecture?
Select an answer first
9expert · hard
A security team needs to detect data exfiltration attempts in real-time. They have a large volume of data access logs from various sources. They want to use a SIEM solution to correlate events and alert on suspicious patterns. Which solution should they use?
Select an answer first
10application · medium
A legal firm shares confidential documents with external counsel. They need to ensure that the documents cannot be forwarded, printed, or accessed after 90 days. Which technology should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ZERO-TRUST-DESIGN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Dell Technologies. “ZERO-TRUST-DESIGN” is a trademark of its owner, used for identification only.