Describe Microsegementation, SDP, and Enhanced Identity Governance Approaches ZERO-TRUST-DESIGN Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   In a Zero Trust architecture, where are microsegmentation policies typically enforced?

   • AOn the hypervisor or host-based firewall of each workload.
   • BIn the DNS server configuration.
   • CAt the internet gateway only.
   • DAt the core router of the data center.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A global company needs to provide secure access to its internal applications for both employees and external contractors. Employees will use company-managed laptops, while contractors will use personal devices. The company wants to enforce the same level of security for both groups, but the contractors' devices cannot be managed by the company. Which SDP deployment model should the company choose to meet these requirements?

   • AServer-gateway model with a web portal for both employees and contractors.
   • BServer-gateway model for employees and client-gateway model for contractors.
   • CClient-gateway model for employees and server-gateway model for contractors.
   • DClient-gateway model with a mandatory SDP client for both employees and contractors.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which security benefit is most directly associated with microsegmentation?

   • AEliminating the need for multi-factor authentication.
   • BEncrypting all data at rest in storage systems.
   • CProviding a single sign-on experience for users.
   • DPreventing unauthorized lateral movement within a network.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is the first step in implementing microsegmentation in a Zero Trust architecture?

   • ADisabling all network traffic to enforce security.
   • BMapping the application dependencies and traffic flows.
   • CDeploying new hardware firewalls.
   • DPurchasing a SIEM solution.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A company is deploying SDP to secure access to its hybrid cloud environment. The security architect wants to ensure that users can only access the applications they are authorized to use, and that the SDP can dynamically adjust access based on changes in user risk. Which SDP architecture should the architect implement to meet these requirements?

   • AA distributed SDP gateway that makes access decisions locally without consulting a central controller.
   • BA centralized SDP controller that integrates with the identity provider and risk assessment engine to make dynamic access decisions.
   • CAn SDP client that stores user permissions locally and grants access based on those permissions.
   • DAn SDP gateway that uses static access control lists to determine access.
   Reveal Solution Discussion Select an answer first