Describe Progression from Traditional to Optimal Stage/phase ZERO-TRUST-DESIGN Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A global company has reached the optimal Zero Trust stage. It uses real-time risk scoring that considers user behavior, device posture, and location. When an employee's behavior deviates from their normal pattern, the system automatically steps up authentication or restricts access. Which feature of the optimal stage does this exemplify?

   • AUser authentication that is performed only when a user accesses a new application.
   • BDynamic policy enforcement based on continuous risk assessment.
   • CNetwork segmentation that is limited to the data center only.
   • DStatic access rules that are defined once and rarely change.
   Reveal Solution Discussion Select an answer first
2. 7expert · medium

   A company's security team is evaluating its current security posture. They have a strong firewall, VPN, and NAC. However, they have discovered that a contractor's device, once connected to the corporate network, was able to access a wide range of internal resources without additional checks. The team is considering moving to Zero Trust. Which limitation of the traditional model is most directly highlighted by this discovery?

   • AThe model relies on a single vendor for all security controls, creating a single point of failure.
   • BThe model is unable to log any network activity, making it impossible to detect the contractor's access.
   • CThe model cannot support any remote access, which is why the contractor was able to connect.
   • DThe model grants broad implicit trust to any device that successfully connects to the internal network.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which statement best describes the traditional perimeter-based security model?

   • AUsers and devices inside the corporate network are implicitly trusted, while external traffic is heavily scrutinized.
   • BTrust is granted based on the user's identity and device posture at each access request.
   • CSecurity controls are applied uniformly to all network traffic, both internal and external.
   • DEvery access request is verified regardless of the user's location or device.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is a key benefit of reaching the optimal Zero Trust stage?

   • ASimplifies security by removing all authentication requirements.
   • BEliminates the need for any security monitoring.
   • CReduces the attack surface by enforcing least-privilege access and micro-segmentation.
   • DGuarantees that no security breach will ever occur.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is a technical driver for adopting Zero Trust?

   • AThe need to eliminate all network segmentation.
   • BThe desire to reduce the complexity of identity management.
   • CThe increasing sophistication of cyberattacks that exploit implicit trust.
   • DThe need to support legacy on-premises applications only.
   Reveal Solution Discussion Select an answer first