Describe Hybrid Zero Trust ZERO-TRUST-DESIGN Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   What is the benefit of automation in a hybrid Zero Trust model?

   • AIt eliminates the need for security policies
   • BIt replaces all human decision-making
   • CIt enables faster and more consistent policy enforcement
   • DIt guarantees no security breaches
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A company is implementing Zero Trust and faces the challenge of inconsistent policy management between on-premises and cloud. They have separate teams managing each environment. What is the best way to address this challenge?

   • AMigrate all workloads to the cloud to eliminate on-premises management.
   • BUse a single tool that only manages cloud policies.
   • CAllow each team to manage their own policies independently.
   • DEstablish a centralized security governance team to define and enforce consistent policies across all environments.
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A security administrator wants to enforce least privilege for users accessing resources in a hybrid environment. Which action best implements least privilege?

   • AGrant users permanent access to all resources they might need.
   • BUse role-based access control (RBAC) to assign only the permissions required for each user's job function.
   • CUse network segmentation to isolate resources and grant broad access within each segment.
   • DProvide all users with administrator access to simplify management.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   What is the purpose of conditional access policies in a hybrid Zero Trust model?

   • ATo enforce access decisions based on signals like user, device, and location
   • BTo provide a single sign-on experience
   • CTo grant access based on the user's role only
   • DTo replace multi-factor authentication
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A company has a hybrid network with on-premises servers and Azure VNets. They want to implement micro-segmentation to limit lateral movement. They have a mix of legacy applications that cannot be moved and modern applications that are cloud-native. What is the most effective way to implement micro-segmentation?

   • AUse Azure NSGs for cloud workloads and deploy a distributed firewall on-premises, then centrally manage policies.
   • BUse separate segmentation strategies for cloud and on-premises without integration.
   • CUse only Azure NSGs and rely on network ACLs on-premises.
   • DImplement a single firewall at the internet edge and use VLANs on-premises.
   Reveal Solution Discussion Select an answer first