Describe Progression from Traditional to Optimal Stage/phase ZERO-TRUST-DESIGN Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company is considering Zero Trust because it has experienced several incidents where compromised internal accounts were used to access sensitive data. The security team believes the traditional model's reliance on network location as a trust indicator is the root cause. Which driver is most directly motivating the move to Zero Trust?

   • AThe need to move to a cloud-based infrastructure.
   • BThe need to reduce the number of security tools.
   • CThe need to shift from location-based trust to identity-based, risk-based access decisions.
   • DThe need to increase the number of security personnel.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A retail company is experiencing an increase in credential theft attacks. Employees often reuse passwords, and the company has no device compliance checks. The security team wants to adopt Zero Trust to reduce the risk of account compromise. Which transition driver is most relevant in this scenario?

   • AThe need to strengthen identity verification and enforce device health as part of access decisions.
   • BThe need to move all applications to a public cloud provider.
   • CThe need to reduce the number of security tools to lower costs.
   • DThe need to eliminate all remote work to reduce the attack surface.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A large enterprise has fully implemented Zero Trust. Every access request is verified in real time based on user identity, device posture, location, and behavioral patterns. Access policies are dynamically adjusted when risk indicators change, and the network is segmented down to the application level. Which benefit is most directly realized in this optimal stage?

   • AThe elimination of all security incidents because every request is verified.
   • BThe ability to grant users permanent access to all applications once they pass an initial risk assessment.
   • CThe ability to contain a compromised device to a minimal set of resources because access is granted per-session and per-resource.
   • DThe removal of the need for user authentication because the system continuously monitors behavior.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company has been on its Zero Trust journey for two years. It has implemented identity-based access controls, device compliance checks, and micro-segmentation. However, access decisions are still made at the start of a session and are not re-evaluated during the session. The company wants to move to the next stage of maturity. What should the company focus on next?

   • AImplementing continuous verification and risk-based policy adjustments during active sessions.
   • BExpanding the network perimeter by adding more firewalls.
   • CAdding more multifactor authentication factors to the initial login process.
   • DReducing the number of access policies to simplify management.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company's security team is reviewing a recent breach where an attacker gained access to the internal network through a phishing email and then moved laterally to access sensitive financial systems. The attacker used legitimate credentials and was not detected because the internal network was trusted. Which characteristic of the traditional model is most clearly demonstrated?

   • AImplicit trust of users and devices once they are inside the network perimeter.
   • BThe reliance on physical security to protect the data center.
   • CThe inability to log user activity within the network.
   • DThe use of strong encryption for all internal communications.
   Reveal Solution Discussion Select an answer first