A company is implementing a data classification scheme. They have a mix of structured and unstructured data. They need to ensure that classification is applied automatically and consistently, and that the classification drives DLP and monitoring policies. Which approach should they take?

Use Microsoft Purview to create sensitivity labels and auto-classification policies that scan for sensitive data types and apply labels automatically.

Use a third-party data classification tool that only works with structured data.

Manually classify all data using a custom metadata schema.

Implement a DLP policy that scans all data and blocks sensitive information without classification.

A global company wants to enforce data access policies based on the user's location, device compliance, and risk level. They use Azure AD Conditional Access. Which configuration provides the most granular control?

Use Azure AD Identity Protection to automatically block all risky sign-ins and require device compliance for all users.

Create separate conditional access policies for each combination of location, device compliance, and risk level, and assign them to the appropriate user groups.

Create a single conditional access policy that requires MFA for all users and all cloud apps.

Implement Azure AD Privileged Identity Management to require approval for all access requests.

A company wants to enforce data-centric policies that follow the data regardless of where it is stored or accessed. They use a mix of on-premises and cloud services. Which approach best achieves this?

Deploy DLP agents on all endpoints and servers.

Use sensitivity labels with encryption and rights management that apply to both on-premises and cloud data.

Implement separate security policies for on-premises and cloud environments.

Use a VPN to secure all data transfers between on-premises and cloud.

Which of the following best describes a data-centric approach to policy enforcement?

Policies are based solely on the user's identity

Policies are applied only when data is stored on-premises

Policies are attached to the data and travel with it

Policies are applied based on the network location of the data

Dell Zero Trust Design

Domain 5Objective 2

Apply Data Centric Zero Trust ZERO-TRUST-DESIGN Practice Questions (Page 5)

Part of the Data Centric Zero Trust domain, which accounts for 10% of the ZERO-TRUST-DESIGN exam.

28questions here

6free pages

7concepts

10%of the exam

Questions 21–25

21foundation · easy
Which of the following is an example of a data classification label that would be used in a Zero Trust data protection strategy?
Select an answer first
22expert · hard
A company is implementing a data classification scheme. They have a mix of structured and unstructured data. They need to ensure that classification is applied automatically and consistently, and that the classification drives DLP and monitoring policies. Which approach should they take?
Select an answer first
23application · medium
A global company wants to enforce data access policies based on the user's location, device compliance, and risk level. They use Azure AD Conditional Access. Which configuration provides the most granular control?
Select an answer first
24application · medium
A company wants to enforce data-centric policies that follow the data regardless of where it is stored or accessed. They use a mix of on-premises and cloud services. Which approach best achieves this?
Select an answer first
25foundation · easy
Which of the following best describes a data-centric approach to policy enforcement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ZERO-TRUST-DESIGN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Dell Technologies. “ZERO-TRUST-DESIGN” is a trademark of its owner, used for identification only.