Describe Role of Visibility and Analytics ZERO-TRUST-DESIGN Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A large enterprise is implementing Zero Trust and wants to ensure visibility across all users, devices, and traffic. They have a diverse environment with on-premises data centers, multiple cloud providers, and a remote workforce. The security team is concerned about the cost and complexity of collecting and storing telemetry from all sources. Which approach best balances visibility with cost and complexity?

   • APrioritize telemetry collection based on risk, focusing on critical assets and high-risk users, and use a tiered storage strategy.
   • BOutsource all monitoring to a managed security service provider (MSSP) and have no internal visibility.
   • CCollect and store all telemetry from every source in a centralized data lake, regardless of cost.
   • DUse a single cloud provider's native monitoring tools for all environments, even if they don't support on-premises.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A medium-sized business is implementing Zero Trust and wants to integrate visibility and analytics into their daily operations. They have a small security team and limited budget. Which approach is most practical for operationalizing visibility?

   • AUse a cloud-based SIEM with automated alerting and a weekly review of security dashboards.
   • BOutsource all monitoring to a managed security service provider (MSSP) and have no internal visibility.
   • CDeploy a full SIEM solution with a dedicated team of analysts to monitor alerts 24/7.
   • DRely solely on the built-in logging features of their existing firewall and switch infrastructure.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   How does continuous risk assessment enable adaptive policy enforcement in a Zero Trust architecture?

   • ABy updating risk scores in real time and adjusting access privileges accordingly
   • BBy blocking all access to sensitive data regardless of user behavior
   • CBy providing a static risk score that is calculated once during onboarding
   • DBy requiring users to change their passwords every 30 days
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company is implementing Zero Trust and wants to ensure visibility across all users, devices, and traffic. They have a mix of on-premises and cloud applications. Which visibility approach is most aligned with Zero Trust principles?

   • AFocus visibility efforts on the corporate network and on-premises applications only.
   • BUse separate monitoring tools for on-premises and cloud environments, with no integration.
   • CCollect and correlate telemetry from all users, devices, and network traffic, regardless of location, into a central platform.
   • DRely on the cloud provider's built-in monitoring for all cloud applications and ignore on-premises telemetry.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Why is correlating data from multiple sources important for security decisions in a Zero Trust environment?

   • AIt reduces the total amount of data that needs to be stored
   • BIt eliminates the need for human security analysts
   • CIt provides a more complete picture of an event, enabling better-informed decisions
   • DIt guarantees that all threats are automatically blocked
   Reveal Solution Discussion Select an answer first