Assess the Factors Impacting Zero Trust Implementation in Enterprise ZERO-TRUST-DESIGN Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A global manufacturing company is planning a Zero Trust rollout. The security team has completed a readiness assessment and found that the organization's identity infrastructure is mature, but many legacy industrial control systems (ICS) cannot support modern authentication protocols. The company must maintain production uptime and cannot afford a full ICS replacement in the current fiscal year. What should the security architect prioritize first?

   • ADelay the Zero Trust rollout until the ICS environment can be fully modernized.
   • BReplace all legacy ICS devices with modern equivalents that support multifactor authentication.
   • CDeploy network micro-segmentation around the ICS environment while using compensating controls for legacy devices.
   • DImplement strict conditional access policies for all users, including those accessing ICS systems.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is a potential business impact of implementing Zero Trust?

   • AIncreased user friction due to more authentication steps
   • BIncrease in the number of data centers
   • CReduction in the number of employees needed
   • DElimination of all security incidents
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   When planning a Zero Trust implementation, which of the following is an example of an organizational factor that should be considered?

   • AThe level of security awareness among employees
   • BThe number of applications in the environment
   • CThe network bandwidth available in the data center
   • DThe version of the operating system used on servers
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A retail company is implementing Zero Trust. The company uses a legacy point-of-sale (POS) system that is critical for sales. The POS system runs on an old operating system that is no longer supported. The security team wants to isolate the POS system from the rest of the network. What is the most important technical constraint to address?

   • AThe POS system's inability to be patched or updated, which requires compensating controls.
   • BThe need to replace the POS system immediately.
   • CThe need to train staff on the new security controls.
   • DThe requirement to comply with PCI DSS for cardholder data.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which of the following best describes the purpose of assessing organizational readiness for Zero Trust implementation?

   • ATo calculate the return on investment for security products
   • BTo determine the number of security tools needed
   • CTo evaluate the organization's current security posture, culture, and resources
   • DTo select the Zero Trust architecture framework
   Reveal Solution Discussion Select an answer first