Describe Hybrid Zero Trust ZERO-TRUST-DESIGN Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Why can inconsistent policy management be a challenge in hybrid Zero Trust?

   • AIt creates security gaps between on-premises and cloud environments
   • BIt simplifies compliance auditing
   • CIt leads to a single point of failure
   • DIt increases network latency
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In a hybrid Zero Trust model, how does the principle of least privilege apply?

   • AUsers are granted access to all resources by default
   • BUsers are granted access only after a security review
   • CUsers are granted access based on their job title
   • DUsers are granted the minimum level of access needed to perform their job
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company runs a legacy on-premises application that cannot be migrated to the cloud, but they have moved several other workloads to Azure. They want to apply Zero Trust principles consistently across both environments. Which approach best aligns with the hybrid Zero Trust model?

   • AMigrate the legacy application to the cloud to simplify security management.
   • BApply the same Zero Trust policies and verification mechanisms to both on-premises and cloud resources.
   • CIsolate the on-premises application with a firewall and focus Zero Trust efforts on the cloud workloads.
   • DTreat the on-premises network as trusted and apply strict controls only to cloud resources.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A retail company has point-of-sale systems at edge locations, a data center for backend processing, and uses Azure for analytics. They want to implement Zero Trust across all these components. What is a key consideration for securing the edge locations?

   • ADeploy a firewall at each edge location and rely on network perimeter security.
   • BAssume edge devices are trusted because they are physically secured in stores.
   • CUse a VPN from edge to the data center and consider that sufficient.
   • DTreat edge devices as untrusted and continuously verify their posture before allowing access to any resource.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   An organization has a mix of on-premises domain-joined devices and unmanaged personal devices used for remote work. They want to enforce device compliance for access to both on-premises and cloud resources. However, they also want to allow personal devices to access some resources with restrictions. What is the best approach?

   • ABlock all access from personal devices.
   • BAllow all devices to access all resources without compliance checks.
   • CUse conditional access policies that require compliant devices for sensitive resources and allow access with session controls for non-compliant devices.
   • DRequire all personal devices to be domain-joined.
   Reveal Solution Discussion Select an answer first