Apply Zero Trust for the Cloud ZERO-TRUST-DESIGN Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the purpose of applying a just-in-time (JIT) access policy to a cloud virtual machine?

   • ATo limit administrative access to the VM to only the time it is needed
   • BTo encrypt the VM's virtual disks at rest
   • CTo monitor the VM's performance metrics in real time
   • DTo automatically patch the operating system on a schedule
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company uses a cloud identity provider (IdP) and wants to implement Zero Trust for their cloud applications. They need to ensure that only users with a valid business need can access specific applications, and that access is granted dynamically based on the user's context. They also need to monitor for unusual access patterns. What should they implement?

   • AA policy that requires users to use a VPN to access applications, and trusts the VPN connection
   • BConditional access policies that evaluate user, device, and location, and an identity protection solution that monitors for risky sign-ins
   • CA policy that grants all users access to all applications, and relies on the application's own authentication
   • DA policy that grants access based on the user's role, without considering device or location, and does not monitor for anomalies
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which control is used to protect cloud data at rest by converting it into an unreadable format?

   • ANetwork segmentation
   • BData loss prevention (DLP)
   • CAccess reviews
   • DEncryption
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the primary purpose of a data loss prevention (DLP) policy in a cloud environment?

   • ATo restrict network access to storage accounts
   • BTo automatically back up data to a secondary region
   • CTo detect and prevent unauthorized transmission or sharing of sensitive data
   • DTo encrypt all data stored in cloud databases
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company is moving to a Zero Trust model for their cloud environment. They want to ensure that every access request is verified, regardless of the user's location or device. They also need to continuously evaluate the security posture of the session and revoke access if the risk level changes. What should they implement?

   • AA policy that requires users to change their passwords every 90 days and uses IP-based restrictions
   • BA policy that grants access based on the user's role, without requiring MFA, and trusts the user's device if it is company-issued
   • CA policy that requires users to use a VPN to access the cloud environment, and trusts all traffic from the VPN
   • DConditional access policies that evaluate user, device, and location in real time, and session policies that can revoke access if risk is detected
   Reveal Solution Discussion Select an answer first