Describe the Significance of Moving from Perimeter Towards Zero Trust Security ZERO-TRUST-DESIGN Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company is replacing its legacy VPN-based remote access with a Zero Trust architecture. The security team wants to ensure that even if a user's credentials are compromised, the attacker cannot move laterally to other systems. Which combination of Zero Trust controls best addresses this concern?

   • ASingle sign-on and session timeouts
   • BStronger password policy and regular penetration testing
   • CNetwork firewall and antivirus software
   • DMicro-segmentation and least privilege access
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary significance of moving from a perimeter-centric model to a Zero Trust architecture?

   • AIt makes all data publicly accessible to improve collaboration
   • BIt shifts security focus from the network boundary to individual users, devices, and applications
   • CIt eliminates the need for firewalls and other network security devices
   • DIt relies on a single, strong password for all users
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which of the following is a key limitation of the perimeter-based security model in modern IT environments?

   • AIt is unable to support any remote access
   • BIt assumes that all internal traffic is safe, which fails when attackers breach the perimeter
   • CIt requires too much processing power for modern encryption
   • DIt cannot protect against threats that originate from outside the network
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company is moving from a perimeter-based model to Zero Trust. The CIO asks how this shift changes the security team's approach to network access. Which statement best describes the change?

   • AAll traffic is routed through a single cloud proxy.
   • BThe firewall is replaced by a VPN concentrator.
   • CThe network is divided into more VLANs.
   • DAccess decisions are based on user identity and device posture, not just network location.
   Reveal Solution Discussion Select an answer first
6. 5application · easy

   A company is implementing Zero Trust. They want to ensure that a marketing intern can only access the CRM and not the finance system. Which Zero Trust principle is the company applying?

   • ANever trust, always verify
   • BMicro-segmentation
   • CLeast privilege access
   • DAssume breach
   Reveal Solution Discussion Select an answer first