Describe Microsegementation, SDP, and Enhanced Identity Governance Approaches ZERO-TRUST-DESIGN Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company is evaluating SDP to secure access to its internal applications. The security architect wants to ensure that even if an attacker compromises a user's device, the attacker cannot discover or connect to other internal services. Which SDP capability is most effective for this purpose?

   • AThe SDP gateway performs deep packet inspection to block malicious traffic.
   • BThe SDP client encrypts all traffic, preventing eavesdropping on the network.
   • CThe SDP gateway only allows connections to the specific service the user is authorized to access, and all other services are invisible.
   • DThe SDP controller uses multi-factor authentication to verify the user's identity.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A multinational corporation is implementing enhanced identity governance. The compliance team requires that all user access to sensitive systems be reviewed by the data owner at least quarterly. Which identity governance process should be configured to meet this requirement?

   • AIdentity lifecycle management
   • BAccess certifications
   • CIdentity analytics
   • DRole mining
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which component in a Software-Defined Perimeter (SDP) architecture is responsible for authenticating users and devices before granting access?

   • AThe SDP Controller
   • BThe SDP Gateway
   • CThe DNS Server
   • DThe SDP Client
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the primary function of identity analytics in enhanced identity governance?

   • ATo encrypt sensitive data in the identity store.
   • BTo synchronize user accounts between directories.
   • CTo detect risky access behavior and potential identity-related threats.
   • DTo provide a user interface for password resets.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   How does an SDP support the Zero Trust principle of least privilege?

   • ABy providing access only to the specific resources a user is authorized to use.
   • BBy hiding the network entirely and requiring no authentication.
   • CBy granting users access to all resources after a single authentication.
   • DBy allowing access based on the user's IP address only.
   Reveal Solution Discussion Select an answer first