A software company is adopting Zero Trust and wants to monitor network traffic for signs of compromised credentials. The security team wants to detect when a user's account is used from an unusual location or device. Which tool should they deploy?

An intrusion detection system (IDS) that monitors for known attack signatures.

A vulnerability scanner that identifies missing patches.

A network firewall that blocks traffic from unknown IP addresses.

User and entity behavior analytics (UEBA) that profiles normal user behavior and flags anomalies.

What is a key consideration when integrating Zero Trust controls into existing network infrastructure?

Ensuring compatibility with current hardware and software.

Disabling all legacy protocols immediately.

Moving all workloads to the cloud.

Replacing all existing network devices with new ones.

A university is integrating Zero Trust with its existing Cisco network infrastructure. The team wants to enforce micro-segmentation without replacing the current switches. Which approach is most practical?

Disable all inter-VLAN routing to prevent lateral movement.

Replace all switches with new ones that support micro-segmentation natively.

Use VLANs and access control lists (ACLs) on the existing switches to segment traffic.

Implement a software-defined network (SDN) overlay that requires new controllers.

Which of the following is an example of a secure communication channel used in Zero Trust networks?

HTTP (Hypertext Transfer Protocol)

A retail chain is implementing micro-segmentation in its data center to isolate the payment processing systems from the rest of the network. The security team wants to ensure that only the point-of-sale (POS) terminals can communicate with the payment gateway. Which control should be implemented?

Use a VLAN to separate the payment gateway but allow all traffic from the corporate network.

Create a network policy that allows traffic from POS terminals to the payment gateway on specific ports, and denies all other traffic.

Place the payment gateway on the same subnet as the POS terminals for simplicity.

Allow all traffic between the payment gateway and any internal system to ensure availability.

Dell Zero Trust Design

Domain 4Objective 2

Apply Zero Trust in Networks ZERO-TRUST-DESIGN Practice Questions (Page 6)

Part of the Zero Trust in Networks domain, which accounts for 12% of the ZERO-TRUST-DESIGN exam.

30questions here

6free pages

6concepts

12%of the exam

Questions 26–30

26application · medium
A software company is adopting Zero Trust and wants to monitor network traffic for signs of compromised credentials. The security team wants to detect when a user's account is used from an unusual location or device. Which tool should they deploy?
Select an answer first
27foundation · easy
What is a key consideration when integrating Zero Trust controls into existing network infrastructure?
Select an answer first
28application · medium
A university is integrating Zero Trust with its existing Cisco network infrastructure. The team wants to enforce micro-segmentation without replacing the current switches. Which approach is most practical?
Select an answer first
29foundation · easy
Which of the following is an example of a secure communication channel used in Zero Trust networks?
Select an answer first
30application · medium
A retail chain is implementing micro-segmentation in its data center to isolate the payment processing systems from the rest of the network. The security team wants to ensure that only the point-of-sale (POS) terminals can communicate with the payment gateway. Which control should be implemented?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to ZERO-TRUST-DESIGN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Dell Technologies. “ZERO-TRUST-DESIGN” is a trademark of its owner, used for identification only.