Describe and Evaluate the Zero Trust Capabilities ZERO-TRUST-DESIGN Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company has implemented Zero Trust capabilities for Identity and Devices, but they have not yet implemented any form of data protection. They are required by regulation to encrypt all sensitive data at rest. What is the most immediate capability gap?

   • AData encryption at rest
   • BNetwork segmentation
   • CUser behavior analytics
   • DApplication security testing
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   When evaluating a Zero Trust capability, which criterion assesses whether the capability can enforce policies consistently across all users, devices, and applications?

   • AIntegration
   • BCoverage
   • CAlignment with tenets
   • DPolicy enforcement
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company is considering implementing a Zero Trust capability that requires users to authenticate via a mobile app push notification. The capability is highly secure but may inconvenience users who do not have their mobile devices readily available. What is the primary trade-off being assessed?

   • AOperational impact versus policy enforcement
   • BSecurity versus user experience
   • CCost versus complexity
   • DCoverage versus integration
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A company is designing a Zero Trust architecture. They have implemented strong identity verification and device compliance, but they are debating whether to invest in micro-segmentation or a next-generation firewall (NGFW) with intrusion prevention. The company has a limited budget and a high risk of lateral movement. Which capability should be prioritized?

   • ANeither, because identity and device controls are sufficient
   • BMicro-segmentation, because it directly limits lateral movement
   • CNGFW with intrusion prevention, because it provides broader network security
   • DBoth, because they are complementary and should be implemented together
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A retail company is implementing Zero Trust. They want to ensure that only authorized employees can access the inventory management system, that access is granted based on least privilege, and that any unusual access patterns trigger automated alerts. Which pillars are primarily involved in this implementation?

   • AIdentity, Network, and Devices
   • BNetwork, Automation & Analytics, and Devices
   • CDevices, Network, and Applications & Data
   • DIdentity, Applications & Data, and Automation & Analytics
   Reveal Solution Discussion Select an answer first