Describe and Evaluate the Zero Trust Capabilities ZERO-TRUST-DESIGN Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which evaluation criterion for a Zero Trust capability focuses on how well it works with existing security tools and processes?

   • AAlignment with tenets
   • BCoverage
   • CIntegration
   • DPolicy enforcement
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In a Zero Trust architecture, which pillar is primarily responsible for enforcing least-privilege access decisions based on user identity and device health?

   • AApplications & Data
   • BAutomation & Analytics
   • CIdentity
   • DNetwork
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company is choosing between two Zero Trust capabilities: one that provides detailed visibility into all network traffic and one that provides automated response to threats. The visibility tool is cheaper but requires manual analysis. The automated response tool is more expensive but reduces response time. The company has a small security team and a high volume of alerts. Which capability should they choose?

   • AVisibility, because it is cheaper and provides more information
   • BNeither, because the current tools are sufficient
   • CAutomated response, because it reduces the burden on the small team
   • DBoth, because they are complementary
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   When prioritizing remediation of gaps in Zero Trust capabilities, which factor should be considered first?

   • AThe risk associated with the gap
   • BThe ease of implementation
   • CThe cost of the remediation
   • DThe vendor's reputation
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A manufacturing company is adopting Zero Trust. They currently have multi-factor authentication (MFA) for all users, but no device compliance checks. They also lack a centralized way to enforce access policies across their on-premises and cloud applications. Which capability gap should be prioritized first?

   • AUser behavior analytics
   • BDevice compliance and posture assessment
   • CNetwork segmentation
   • DCentralized policy enforcement across applications
   Reveal Solution Discussion Select an answer first