Apply Identity Based Zero Trust ZERO-TRUST-DESIGN Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the purpose of a conditional access policy?

   • ATo grant access to all users regardless of risk
   • BTo replace the need for multi-factor authentication
   • CTo evaluate signals such as user, device, location, and risk before granting access
   • DTo automatically reset user passwords when they are forgotten
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A financial services firm is preparing for an external audit. The audit requires proof that user access rights are reviewed periodically and that former employees no longer have access. The identity team has a manual process where managers submit access review requests via email. Which improvement should the team implement to meet the audit requirement most effectively?

   • AAutomate the access review workflow with a tool that sends reminders to managers, tracks approvals, and generates an audit report
   • BRequire managers to submit a monthly spreadsheet of current team members and their roles to the security team
   • CSchedule a quarterly script that disables all accounts not logged into within the last 90 days
   • DCreate a shared mailbox where managers can request access changes and the help desk processes them within 48 hours
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Why is auditing identity-related activities important for compliance?

   • ATo speed up the authentication process
   • BTo provide a record of who accessed what and when, which is often required by regulations
   • CTo replace the need for access reviews
   • DTo automatically grant access to all users
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which authentication method is considered passwordless?

   • AUsing a one-time password sent via SMS
   • BUsing a complex password that is changed frequently
   • CUsing a username and password with MFA
   • DUsing a hardware security key that requires a PIN
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A global law firm is implementing Zero Trust. Partners require access to client documents from any device, including personal devices, while traveling. The firm's compliance team mandates that client data can only be accessed from managed devices. The identity team must balance partner productivity with this compliance requirement. Which approach should they take?

   • ARequire MFA and a compliant device for access to client data, and use conditional access to block access from non-compliant devices
   • BProvide partners with a separate, unmanaged device for client data access and accept the risk
   • CAllow access from any device with MFA, and rely on data loss prevention (DLP) to prevent data exfiltration
   • DRequire a VPN connection for all access to client data, regardless of device compliance
   Reveal Solution Discussion Select an answer first