An organization wants to automatically respond to security incidents in their hybrid environment, such as isolating a compromised VM in Azure and blocking a user's access on-premises. What is the best way to achieve this?

Use Azure Sentinel playbooks that trigger automated responses across both cloud and on-premises resources.

Automate only cloud responses and rely on manual for on-premises.

Manually execute response procedures for each incident.

Use separate automation tools for cloud and on-premises without integration.

A company has both on-premises domain-joined Windows computers and cloud-only Azure AD joined devices. They want to ensure that only compliant and healthy devices can access corporate resources, regardless of location. Which solution should they use to continuously verify device posture across both device types?

Require users to manually attest device compliance before access.

Implement a NAC solution only for on-premises devices.

Use Group Policy on-premises and rely on Azure AD device registration for cloud devices.

Use Microsoft Intune to manage both on-premises and cloud devices and enforce compliance policies.

A security architect is designing network segmentation for a hybrid environment that includes on-premises data center and Azure virtual networks. The goal is to limit lateral movement if an attacker compromises a workload. Which approach best achieves this?

Implement micro-segmentation using Azure Network Security Groups and on-premises distributed firewalls, and enforce consistent rules via policy.

Use network security groups (NSGs) in Azure and traditional VLANs on-premises, but do not connect them.

Rely on a single perimeter firewall at the internet edge.

Use Azure Firewall only for cloud workloads and a separate firewall for on-premises.

In a hybrid Zero Trust architecture, how do on-premises and cloud components typically interact?

They rely on a single firewall for all traffic

They share identity and policy enforcement points

They operate in isolation with no data exchange

They are managed by separate security teams with no coordination

What is a common challenge when implementing Zero Trust in a hybrid environment?

Legacy systems that do not support modern authentication

Dell Zero Trust Design

Domain 8Objective 1

Describe Hybrid Zero Trust ZERO-TRUST-DESIGN Practice Questions (Page 1)

Part of the Hybrid Zero Trust domain, which accounts for 4% of the ZERO-TRUST-DESIGN exam.

36questions here

8free pages

10concepts

4%of the exam

Questions 1–5

1application · medium
An organization wants to automatically respond to security incidents in their hybrid environment, such as isolating a compromised VM in Azure and blocking a user's access on-premises. What is the best way to achieve this?
Select an answer first
2application · medium
A company has both on-premises domain-joined Windows computers and cloud-only Azure AD joined devices. They want to ensure that only compliant and healthy devices can access corporate resources, regardless of location. Which solution should they use to continuously verify device posture across both device types?
Select an answer first
3application · medium
A security architect is designing network segmentation for a hybrid environment that includes on-premises data center and Azure virtual networks. The goal is to limit lateral movement if an attacker compromises a workload. Which approach best achieves this?
Select an answer first
4foundation · easy
In a hybrid Zero Trust architecture, how do on-premises and cloud components typically interact?
Select an answer first
5foundation · easy
What is a common challenge when implementing Zero Trust in a hybrid environment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ZERO-TRUST-DESIGN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Dell Technologies. “ZERO-TRUST-DESIGN” is a trademark of its owner, used for identification only.