Describe Microsegementation, SDP, and Enhanced Identity Governance Approaches ZERO-TRUST-DESIGN Practice Questions (Page 7)

Questions 31–33

1. 31expert · hard · select all that apply

   A company is implementing enhanced identity governance and wants to ensure that access to critical systems is automatically revoked when an employee changes roles or leaves the company. Which two technologies should the company implement to achieve this? (Select all that apply.)

   • AIdentity analytics
   • BIdentity lifecycle management
   • CPolicy-based access control
   • DAccess certifications
   Check answers Discussion Select an answer first
2. 32foundation · easy

   Which SDP deployment model is most appropriate for a user accessing an application from a personal laptop over the internet?

   • AClient-Gateway
   • BServer-Gateway
   • CGateway-Only
   • DClient-Server
   Reveal Solution Discussion Select an answer first
3. 33application · medium

   A large enterprise is implementing enhanced identity governance as part of its Zero Trust strategy. The security team wants to ensure that user access rights are reviewed regularly and that orphaned accounts are removed promptly. Which two processes are essential to achieve this goal?

   • AIdentity analytics and single sign-on
   • BMulti-factor authentication and privileged access management
   • CRole mining and policy-based access control
   • DIdentity lifecycle management and access certifications
   Reveal Solution Discussion Select an answer first