Describe Progression from Traditional to Optimal Stage/phase ZERO-TRUST-DESIGN Practice Questions (Page 6)

Questions 26–29

1. 26application · medium

   A security architect is designing a Zero Trust access policy for a hybrid workforce. Employees work from the office, home, and coffee shops, and they access both on-premises applications and cloud services. The architect wants to apply the principle of 'never trust, always verify' consistently. Which approach best embodies this principle?

   • AApply strict verification only for users connecting from outside the corporate network, while trusting internal connections.
   • BUse a single sign-on system to authenticate users once and then allow all subsequent access without further checks.
   • CRequire the same authentication and authorization checks for every access request, regardless of the user's location or device.
   • DRely on the VPN to establish a secure tunnel and then trust all traffic within that tunnel.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which factor commonly drives an organization to transition from a traditional security model to Zero Trust?

   • AThe desire to eliminate all security policies.
   • BThe need to reduce the number of security tools.
   • CThe increasing use of cloud services and remote work, which erodes the traditional network perimeter.
   • DThe need to comply with a regulation that mandates Zero Trust.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A security architect is explaining Zero Trust to the board. A board member asks, 'If we implement Zero Trust, will we still need to protect the network perimeter?' Which response best reflects the Zero Trust model?

   • AThe perimeter is replaced by a single vendor solution that handles all security.
   • BYes, the perimeter is the only thing that matters, and Zero Trust is just an add-on.
   • CThe perimeter is still protected, but it is no longer the primary trust boundary; every access request is verified regardless of location.
   • DNo, the perimeter is completely irrelevant and should be removed.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is a key limitation of the traditional perimeter-based security model?

   • AIt cannot protect against external attackers who are outside the network.
   • BIt is too complex to implement for small organizations.
   • CIt requires continuous verification of every user and device on every access request.
   • DIt assumes that all internal network traffic is safe and trustworthy.
   Reveal Solution Discussion Select an answer first