Describe Microsegementation, SDP, and Enhanced Identity Governance Approaches ZERO-TRUST-DESIGN Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A company is deploying enhanced identity governance and wants to automate the process of creating new user accounts based on the user's job function. The company also wants to ensure that the accounts are automatically disabled when the user leaves the organization. Which technology should the company implement?

   • AIdentity analytics
   • BAccess certifications
   • CIdentity lifecycle management
   • DRole mining
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A retail company is planning to implement microsegmentation to protect its payment processing systems. The security team is concerned about the operational overhead of managing many individual policies. Which microsegmentation strategy would help reduce the number of policies while still providing granular control?

   • AGroup workloads into logical application tiers and create policies based on the communication needs between tiers.
   • BCreate a separate policy for each individual workload and IP address.
   • CRely on the existing VLAN segmentation and do not implement microsegmentation.
   • DUse a single policy that allows all traffic between workloads in the same data center.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   In an SDP architecture, what is the role of the SDP Gateway?

   • ATo host the applications that users access.
   • BTo authenticate users and devices.
   • CTo provide a user interface for administrators.
   • DTo enforce access policies by allowing or denying connections to protected resources.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is the primary purpose of access certifications in enhanced identity governance?

   • ATo provide users with a single sign-on experience.
   • BTo regularly review and confirm that users have appropriate access rights.
   • CTo encrypt user credentials in the identity store.
   • DTo automatically grant all users the same level of access.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What is the primary characteristic that distinguishes microsegmentation from traditional network segmentation?

   • AIt relies on a central firewall to filter traffic between subnets.
   • BIt uses VLANs to isolate traffic at the network layer.
   • CIt creates security zones based on physical network topology.
   • DIt applies granular security policies to individual workloads or applications.
   Reveal Solution Discussion Select an answer first