A security team needs to detect anomalous user behavior across both on-premises and cloud resources. They have Azure AD and on-premises Active Directory. Which solution should they use to gain unified visibility?

Use only on-premises SIEM and collect cloud logs manually.

Use separate monitoring tools for each environment without integration.

Rely on Azure AD sign-in logs only for cloud and on-premises.

Enable Azure AD Identity Protection and integrate on-premises AD logs with Azure Sentinel.

A company stores sensitive customer data in an on-premises SQL Server and also in Azure Blob Storage. They want to apply data classification and encryption consistently across both locations. Which approach should they take?

Use Azure Information Protection (AIP) for cloud data and rely on SQL Server encryption for on-premises data.

Use DLP policies only for cloud data and rely on database permissions for on-premises.

Implement a unified data classification solution that labels data in both on-premises and cloud, and use encryption at rest and in transit for all data stores.

Encrypt all data with a single key managed by the cloud provider.

A security team is investigating a potential account compromise that spans on-premises and cloud. They have logs from on-premises AD, Azure AD, and Azure workloads. They want to correlate events to determine the full scope of the attack. What is the best approach?

Use only Azure AD sign-in logs and ignore on-premises logs.

Use a third-party SIEM that only supports cloud logs.

Manually review logs from each source separately.

Ingest all logs into Azure Sentinel and use analytics rules to correlate events across sources.

An organization wants to automate policy enforcement for network segmentation in a hybrid environment. They have a mix of on-premises and cloud workloads, and they want to ensure that any new workload is automatically placed in the correct security zone. What is the best approach?

Rely on network administrators to apply policies after workload deployment.

Manually configure network policies for each new workload.

Use a single cloud provider's native tools for both on-premises and cloud.

Use infrastructure as code (IaC) to define and deploy network segmentation policies consistently across environments.

Which of the following is a core principle of Zero Trust?

Trust internal users, verify external users

Dell Zero Trust Design

Domain 8Objective 1

Describe Hybrid Zero Trust ZERO-TRUST-DESIGN Practice Questions (Page 4)

Part of the Hybrid Zero Trust domain, which accounts for 4% of the ZERO-TRUST-DESIGN exam.

36questions here

8free pages

10concepts

4%of the exam

Questions 16–20

16application · medium
A security team needs to detect anomalous user behavior across both on-premises and cloud resources. They have Azure AD and on-premises Active Directory. Which solution should they use to gain unified visibility?
Select an answer first
17application · medium
A company stores sensitive customer data in an on-premises SQL Server and also in Azure Blob Storage. They want to apply data classification and encryption consistently across both locations. Which approach should they take?
Select an answer first
18expert · hard
A security team is investigating a potential account compromise that spans on-premises and cloud. They have logs from on-premises AD, Azure AD, and Azure workloads. They want to correlate events to determine the full scope of the attack. What is the best approach?
Select an answer first
19expert · hard
An organization wants to automate policy enforcement for network segmentation in a hybrid environment. They have a mix of on-premises and cloud workloads, and they want to ensure that any new workload is automatically placed in the correct security zone. What is the best approach?
Select an answer first
20foundation · easy
Which of the following is a core principle of Zero Trust?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ZERO-TRUST-DESIGN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Dell Technologies. “ZERO-TRUST-DESIGN” is a trademark of its owner, used for identification only.