Describe Progression from Traditional to Optimal Stage/phase ZERO-TRUST-DESIGN Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A company is planning its Zero Trust implementation. It has a mix of legacy on-premises applications and modern cloud services. The security team wants to minimize user disruption while gradually improving security. Which implementation approach best aligns with a phased roadmap?

   • AStart with a pilot for a specific application or user group, then expand based on lessons learned.
   • BReplace all legacy applications with cloud-native versions before starting Zero Trust.
   • CDeploy Zero Trust controls across all applications and users simultaneously to achieve consistency.
   • DFocus only on cloud services and ignore legacy applications until they are decommissioned.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company's security team relies on a strong firewall and VPN to protect its on-premises data center. Recently, employees have been accessing SaaS applications directly from personal devices, and some departments have moved data to cloud storage without IT approval. The security team is concerned about visibility and control. Which limitation of the traditional perimeter-based model is most directly exposed by this situation?

   • AThe model assumes that anything inside the network can be trusted, but modern access patterns bypass the perimeter entirely.
   • BThe model requires all applications to be hosted on-premises, which is why cloud adoption breaks it.
   • CThe model is unable to log any network traffic, making forensic analysis impossible.
   • DThe model cannot enforce multifactor authentication for any user, regardless of location.
   Reveal Solution Discussion Select an answer first
4. 23expert · medium

   A company is considering a move to Zero Trust. The security team has identified that the traditional model's reliance on network perimeter controls is insufficient because users now access applications from various devices and locations. The company also wants to improve compliance with data protection regulations. Which driver is most directly addressed by Zero Trust?

   • AThe need to reduce the number of security vendors to simplify management.
   • BThe need to move all applications to a single cloud provider.
   • CThe need to eliminate all remote work to reduce the attack surface.
   • DThe need to enforce consistent security policies across all access scenarios, regardless of the network.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A company has been implementing Zero Trust for three years. It has achieved the following: MFA for all users, device compliance checks, micro-segmentation, and a policy engine that adjusts access based on risk. However, the company still relies on periodic manual reviews of access policies and does not have full automation for policy updates. The security team wants to reach the optimal stage. What is the most critical gap to address?

   • AIncreasing the frequency of manual policy reviews to weekly.
   • BAutomating policy management and enforcement to enable real-time, adaptive responses to risk.
   • CExpanding micro-segmentation to cover all network traffic.
   • DAdding more MFA factors to the authentication process.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company is at the beginning of its Zero Trust journey. It has implemented MFA for all users and has started to document its data flows. The security team is now planning to implement micro-segmentation. According to a typical Zero Trust maturity model, which stage is the company in?

   • AInitial stage, where foundational controls are being deployed and the architecture is still evolving.
   • BAdvanced stage, because MFA is a strong control.
   • COptimal stage, because the company has a clear plan.
   • DTransitional stage, because the company is moving from traditional to Zero Trust.
   Reveal Solution Discussion Select an answer first