Apply Zero Trust in Networks ZERO-TRUST-DESIGN Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What type of data is typically analyzed by network analytics to detect anomalies?

   • ATraffic patterns and flow data.
   • BUser passwords and credentials.
   • CHardware serial numbers.
   • DApplication source code.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What does least-privilege access mean in the context of identity-based access control?

   • AUsers get access based on their seniority.
   • BUsers get access to all resources but with monitoring.
   • CUsers get the minimum level of access needed to perform their job.
   • DUsers get temporary access that expires after a set time.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A government agency is moving from a perimeter-based security model to Zero Trust. The agency wants to ensure that every access request to its internal applications is authenticated and authorized, regardless of the user's location. Which principle is the agency applying?

   • AGranting access based on the user's role without additional verification.
   • BTrusting users based on their network location (e.g., office vs. remote).
   • CRelying on the firewall to block unauthorized external access.
   • DElimination of implicit trust and verification of every request.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A technology company is implementing Zero Trust and wants to use continuous monitoring to enforce policies in real time. The security team wants to automatically revoke access when a user's device is compromised. Which approach best enables this?

   • ADeploy a firewall that blocks traffic from IP addresses associated with compromised devices.
   • BUse a SIEM to collect logs and generate reports for manual review.
   • CIntegrate the network access control (NAC) system with the endpoint detection and response (EDR) tool to trigger policy changes on alerts.
   • DRequire users to report if their device is compromised.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the role of continuous monitoring in a Zero Trust network?

   • ATo detect anomalies and enforce policies in real time.
   • BTo provide a backup of network configuration.
   • CTo replace the need for encryption.
   • DTo increase network speed.
   Reveal Solution Discussion Select an answer first