Apply Zero Trust in Networks ZERO-TRUST-DESIGN Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   An e-commerce company is deploying a new microservices-based application across multiple VPCs. The security team requires that all inter-service communication be encrypted and that services only communicate with each other as needed. Which solution best meets these requirements?

   • AImplement a service mesh with mutual TLS (mTLS) and enforce fine-grained network policies between services.
   • BEncrypt traffic using IPsec VPN tunnels between all services.
   • CPlace all services on the same host and rely on the host's firewall.
   • DUse a single VPC and rely on security groups to allow all traffic between services.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which of the following best describes macro-segmentation?

   • AIsolating each individual server with its own firewall.
   • BDividing the network into large zones, such as production and development.
   • CUsing VLANs to separate broadcast domains.
   • DEncrypting traffic between all network devices.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A financial services firm is implementing Zero Trust network access for its remote employees. The firm wants to ensure that only authorized users on managed devices can access the internal trading application. Which combination of controls best meets this requirement?

   • ARequire multi-factor authentication (MFA) and verify device compliance before granting access to the application.
   • BUse a shared account for all remote employees to simplify access management.
   • CProvide VPN access to the internal network for all remote employees.
   • DAllow access based on the user's IP address and require a strong password.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which approach helps minimize disruption when introducing Zero Trust policies to an existing network?

   • APhased implementation with pilot testing.
   • BImmediate enforcement of all policies across the entire network.
   • CDisabling all non-essential network services.
   • DUsing only open-source tools for implementation.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A large enterprise is implementing micro-segmentation across its hybrid cloud environment. The security team wants to ensure that policies are consistent across on-premises and cloud workloads. Which approach best achieves this?

   • ARely on the cloud provider's default security controls.
   • BImplement separate policies for on-premises and cloud, and manually align them.
   • CUse a centralized policy management platform that can define and enforce segmentation policies across both environments.
   • DUse cloud-native security groups for cloud workloads and VLANs for on-premises.
   Reveal Solution Discussion Select an answer first