Apply Identity Based Zero Trust ZERO-TRUST-DESIGN Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the key difference between RBAC and ABAC?

   • ARBAC is used for authentication, while ABAC is used for authorization
   • BRBAC uses roles, while ABAC uses attributes such as user, resource, and environment
   • CRBAC is always more secure than ABAC
   • DRBAC uses user attributes, while ABAC uses roles
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is a risk score in identity analytics used for?

   • ATo determine the user's password strength
   • BTo calculate the cost of cloud services
   • CTo decide whether to allow or block an access attempt based on the level of risk
   • DTo rank users by their job performance
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A multinational company must comply with data privacy regulations that require restricting access to personal data based on the user's role and location. The identity team needs to demonstrate compliance during an audit. Which combination of controls should they implement?

   • AMFA for all users and a policy that blocks access from outside the corporate network, with no role-based restrictions
   • BABAC only, with no conditional access or audit logging, to control access based on user attributes
   • CA single policy that grants all employees access to personal data and relies on the database to log access
   • DRBAC to assign roles, conditional access policies to restrict access based on location, and audit logging of all access to personal data
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Why is identity considered the new perimeter in Zero Trust?

   • ABecause network boundaries are no longer relevant at all
   • BBecause users and devices are increasingly outside the traditional network
   • CBecause passwords are the strongest authentication method
   • DBecause identity is easier to manage than network security
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company is subject to a regulation that requires privileged access to be reviewed quarterly and that any changes to privileged roles be logged. The identity team has a hybrid environment with on-premises Active Directory and cloud applications. They need to ensure compliance without duplicating efforts. What should they implement?

   • AA single identity governance solution that covers both on-premises and cloud, with automated access reviews and audit logging for role changes
   • BA policy that grants all privileged roles to a small group of administrators and reviews their access annually
   • CSeparate review processes for on-premises and cloud, with manual logging of role changes in each
   • DA script that exports all privileged role memberships to a spreadsheet for the compliance team to review
   Reveal Solution Discussion Select an answer first