Describe Role of Visibility and Analytics ZERO-TRUST-DESIGN Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is the primary benefit of ongoing risk scoring in a Zero Trust model?

   • AIt allows access decisions to be based on the user's current risk level rather than a static trust level
   • BIt ensures that all users have the same level of access
   • CIt eliminates the need for multi-factor authentication
   • DIt provides a one-time assessment of the user's trustworthiness
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company's SOC is investigating a potential data breach. They have logs from the firewall, the authentication server, and the endpoint. Which approach is most effective for understanding the scope of the breach?

   • ADelete all logs after the investigation to prevent further exposure.
   • BAnalyze each log source independently and document the findings separately.
   • CFocus only on the firewall logs because they show all network traffic.
   • DCorrelate the logs to reconstruct the sequence of events and identify the attacker's actions.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A company wants to operationalize visibility and analytics in their SOC. They have a SIEM that ingests logs from multiple sources, but the SOC team is overwhelmed by the number of alerts. They want to reduce alert fatigue while maintaining effective detection. Which approach is most effective?

   • AIncrease the alert threshold for all rules to reduce the number of alerts.
   • BImplement alert correlation rules that group related alerts into incidents.
   • CHire more SOC analysts to review all alerts.
   • DDisable all alerts and rely on manual log review.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Why is it important to integrate visibility and analytics into maintenance workflows?

   • ATo reduce the need for security patches
   • BTo eliminate the need for change management processes
   • CTo ensure that security monitoring continues to function effectively during system changes
   • DTo automate all maintenance tasks without human oversight
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   How do analytics contribute to threat detection in a Zero Trust environment?

   • ABy analyzing patterns in telemetry to identify suspicious activity that may indicate a threat
   • BBy providing a static list of known malicious IP addresses
   • CBy encrypting all data transmissions to prevent eavesdropping
   • DBy simplifying the user login process through single sign-on
   Reveal Solution Discussion Select an answer first