Describe Microsegementation, SDP, and Enhanced Identity Governance Approaches ZERO-TRUST-DESIGN Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A government agency needs to provide secure remote access to a legacy application that does not support modern authentication protocols. The agency wants to avoid installing software on users' personal devices. Which SDP deployment model should the agency choose?

   • AServer-gateway model that provides access through a web portal.
   • BClient-server model where the agency manages the client on each user's device.
   • CClient-gateway model with a web-based SDP client.
   • DGateway-only model without a controller.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which technology is used to identify groups of users with similar access needs to streamline role definition?

   • ARole mining
   • BMulti-factor authentication
   • CSingle sign-on
   • DIdentity analytics
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A financial services firm is implementing microsegmentation in its data center. The security team has identified the application flows that must be allowed and the workloads that should be blocked from communicating. Which step should they take FIRST to ensure the microsegmentation policies are effective and do not disrupt business operations?

   • ADeploy the policies in monitoring mode to observe traffic patterns and identify any legitimate flows that were missed.
   • BDisable the existing firewall rules to avoid conflicts with the new microsegmentation policies.
   • CCreate a policy that denies all traffic between workloads, then add allow rules for the identified flows.
   • DApply the policies to all workloads simultaneously to ensure consistent enforcement across the environment.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which process is part of identity lifecycle management in enhanced identity governance?

   • AConfiguring network firewalls.
   • BAutomatically provisioning and deprovisioning user accounts based on role changes.
   • CMonitoring network traffic for anomalies.
   • DInstalling antivirus software on user devices.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   An organization is integrating enhanced identity governance with its Zero Trust architecture. The goal is to make dynamic access decisions based on the user's current role, risk score, and device posture. Which component should be responsible for evaluating these factors and making the final access decision?

   • AThe identity provider (IdP)
   • BThe identity governance administration (IGA) system
   • CThe policy decision point (PDP)
   • DThe policy enforcement point (PEP)
   Reveal Solution Discussion Select an answer first