Describe Role of Visibility and Analytics ZERO-TRUST-DESIGN Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   In a Zero Trust architecture, what is the primary purpose of maintaining continuous visibility across users, devices, and traffic?

   • ATo simplify compliance reporting by reducing the number of logs collected
   • BTo ensure all data is encrypted both at rest and in transit
   • CTo replace the need for traditional perimeter firewalls
   • DTo enable real-time verification of every access request regardless of location
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary purpose of behavioral analytics in a Zero Trust monitoring strategy?

   • ATo automatically block all traffic from unknown IP addresses
   • BTo enforce password complexity policies across the organization
   • CTo identify deviations from established baselines that may indicate a threat
   • DTo replace signature-based antivirus solutions
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company is implementing Zero Trust and wants to ensure visibility across all users, devices, and traffic. They have a large number of IoT devices that generate a high volume of telemetry. The security team is concerned about the cost of storing and analyzing this data. Which approach best balances visibility with cost?

   • AUse a separate, low-cost storage solution for IoT telemetry and only send alerts to the SIEM.
   • BCollect IoT telemetry only during business hours.
   • CCollect and store all IoT telemetry in the SIEM for full visibility.
   • DIgnore IoT telemetry because IoT devices are not critical.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A technology company uses a Zero Trust model with continuous risk scoring. A user's risk score increases significantly after they attempt to access a sensitive database from a new device and a new location. According to Zero Trust principles, what should the access policy do next?

   • APermanently revoke the user's access to the database.
   • BDeny access immediately and require the user to re-authenticate with multi-factor authentication.
   • CAllow access without any changes because the user is an employee.
   • DAllow access but require additional verification, such as a step-up authentication challenge.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What does correlating a user login event with endpoint posture data help a security team determine?

   • AWhether the network bandwidth is sufficient for the user's session
   • BWhether the user's password meets complexity requirements
   • CWhether the login is likely to be risky based on the device's compliance status
   • DWhether the user has permission to access the application
   Reveal Solution Discussion Select an answer first