Assess the Factors Impacting Zero Trust Implementation in Enterprise ZERO-TRUST-DESIGN Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which of the following is an operational impact of Zero Trust implementation?

   • AThe need for continuous monitoring of user and device behavior
   • BThe elimination of the need for security operations
   • CThe reduction of network bandwidth requirements
   • DThe removal of all legacy systems
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A bank is implementing Zero Trust and must comply with PCI DSS. The bank's cardholder data environment (CDE) is on a legacy mainframe that cannot support modern authentication. The security team proposes to segment the CDE from the rest of the network and implement compensating controls. However, the compliance officer is concerned that segmentation might not be sufficient to meet PCI DSS requirements. What is the most important factor to consider in this situation?

   • AThe mainframe must be replaced to fully comply with PCI DSS.
   • BThe bank should stop processing cardholder data until the mainframe is upgraded.
   • CThe segmentation must be tested annually by an independent third party.
   • DThe compensating controls must be reviewed and approved by the acquiring bank or payment card brand.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which of the following is an example of a high-priority implementation factor in Zero Trust?

   • AThe number of windows in the office
   • BThe support of executive leadership
   • CThe brand of coffee in the break room
   • DThe color scheme of the security dashboard
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the purpose of prioritizing implementation factors in Zero Trust?

   • ATo eliminate all risks in the environment
   • BTo rank factors based on their criticality and influence on success
   • CTo select the cheapest security tools
   • DTo satisfy all regulatory requirements equally
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A university is implementing Zero Trust. The network includes many IoT devices (smart cameras, sensors) that cannot run security agents. The IT team wants to enforce device compliance before granting network access. What is the best approach to handle these IoT devices?

   • AUse MAC address filtering to allow only known IoT devices to connect.
   • BPlace IoT devices on a separate network segment with strict access controls to the rest of the network.
   • CAllow IoT devices to connect without compliance checks because they are not critical.
   • DRequire all IoT devices to be replaced with models that support security agents.
   Reveal Solution Discussion Select an answer first