Apply Identity Based Zero Trust ZERO-TRUST-DESIGN Practice Questions (Page 6)

Questions 26–29

1. 26application · medium

   A software company is adopting Zero Trust principles. The security team wants to ensure that every access request is verified, even if the user is already authenticated and on the corporate network. Which practice best aligns with the 'never trust, always verify' principle?

   • ARequire MFA and enforce conditional access policies for every access request, including those from the corporate network
   • BTrust all users on the corporate network and only require MFA for remote access
   • CVerify the user's identity once at login and then allow all subsequent access within a session
   • DUse a VPN to ensure all traffic is encrypted and assume the user is verified if they can connect
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is the primary purpose of multi-factor authentication (MFA)?

   • ATo verify the user's identity by requiring two or more independent credentials
   • BTo provide a single sign-on experience across multiple applications
   • CTo encrypt data transmitted between the user and the application
   • DTo automatically reset forgotten passwords
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is the purpose of identity governance in relation to compliance?

   • ATo increase user access to improve satisfaction
   • BTo provide a single sign-on experience
   • CTo ensure that identity practices meet regulatory requirements through policies and controls
   • DTo eliminate the need for security monitoring
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A retail company's identity team notices that a user who normally logs in from the company office is now signing in from a foreign country at 3 AM and attempting to access a finance application. The user's account has MFA enabled. What should the identity team do to respond to this anomaly while maintaining a good user experience?

   • AAdd the user's account to a block list for all applications until the security team investigates manually
   • BImmediately disable the user's account and require them to contact the help desk to regain access
   • CIgnore the anomaly because MFA is already enabled and the user will be prompted for a second factor
   • DConfigure an identity protection policy that triggers a risk-based conditional access policy to require a password change and block access if the risk is high
   Reveal Solution Discussion Select an answer first