Apply Zero Trust in Networks ZERO-TRUST-DESIGN Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A university IT team is deploying Zero Trust network access for its staff and students. They want to detect unusual access patterns, such as a student accessing administrative systems at odd hours. Which control is most effective for this requirement?

   • ARequire all users to change their passwords every 30 days.
   • BUse a network access control (NAC) solution to only allow known devices.
   • CImplement a strict firewall rule that blocks all traffic outside business hours.
   • DDeploy network analytics tools that baseline normal behavior and alert on anomalies.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A multinational corporation is implementing Zero Trust across its global offices. The security team wants to ensure that employees can access internal resources from any location, but the company also needs to comply with data residency laws that require certain data to remain in specific countries. Which approach best balances these requirements?

   • AAllow all employees to access all resources from any location, and rely on encryption to protect data.
   • BDeploy regional Zero Trust gateways that enforce access policies and route traffic to the appropriate regional data centers.
   • CRestrict all remote access to a single VPN that connects to a central data center.
   • DUse a global load balancer to route traffic to the nearest data center, regardless of data residency.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A government agency is adopting Zero Trust and wants to eliminate implicit trust for all network access. The agency has a mix of classified and unclassified systems. The security team wants to ensure that users with access to unclassified systems cannot access classified systems, even if they are on the same network. Which control is most aligned with this requirement?

   • ARely on the network firewall to block traffic between classified and unclassified systems.
   • BAllow all users to access all systems, but monitor for unusual behavior.
   • CUse network segmentation to physically separate classified and unclassified systems.
   • DImplement strict identity-based access policies that require separate authentication and authorization for classified systems.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A financial institution is implementing Zero Trust network access for its employees. The security team wants to enforce least-privilege access, but the HR department requires that all employees have access to the payroll system during the last week of each month. Which approach best meets both requirements?

   • AGrant all employees permanent access to the payroll system to avoid access issues.
   • BUse a shared account for all employees to access the payroll system.
   • CCreate a temporary access policy that grants access to the payroll system only during the last week of each month.
   • DRequire employees to request access each time they need to use the payroll system.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A manufacturing company has an existing on-premises network with legacy OT devices that cannot be updated. The security team wants to integrate Zero Trust controls without disrupting production. Which approach is most appropriate?

   • ADeploy a gateway that inspects and filters traffic between the OT network and the IT network, with allow-listing of specific protocols.
   • BConnect the OT network directly to the internet to simplify remote access.
   • CReplace all legacy OT devices with modern, Zero Trust-compatible devices.
   • DDisable all network monitoring on the OT network to avoid interference.
   Reveal Solution Discussion Select an answer first