Describe the Significance of Moving from Perimeter Towards Zero Trust Security ZERO-TRUST-DESIGN Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company is evaluating Zero Trust. They have a legacy application that only supports IP-based access control. The security team wants to enforce user identity-based policies. Which approach best addresses this constraint?

   • APlace the application behind a Zero Trust proxy that authenticates users and forwards requests.
   • BUpgrade the application to support modern authentication.
   • CRequire users to connect via VPN.
   • DUse a firewall rule to allow only specific IP addresses.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A hospital allows doctors to access patient records from their personal tablets. The IT department currently relies on a firewall and a demilitarized zone (DMZ) to protect the internal network. Which limitation of the perimeter model is most critical in this scenario?

   • AThe perimeter cannot provide high availability.
   • BThe perimeter cannot prevent DDoS attacks.
   • CThe perimeter does not protect data that leaves the network to personal devices.
   • DThe perimeter cannot enforce password complexity.
   Reveal Solution Discussion Select an answer first
4. 13expert · medium

   A company has a traditional perimeter with a firewall and VPN. They are planning to allow employees to use their own devices (BYOD) to access internal resources. The security team is concerned about malware on personal devices. Which limitation of the perimeter model is most directly exposed by BYOD?

   • AThe perimeter cannot enforce security controls on devices it does not manage.
   • BThe perimeter cannot authenticate users.
   • CThe perimeter cannot encrypt data in transit.
   • DThe perimeter cannot provide a VPN connection.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Why does the perimeter-based security model struggle to protect data in cloud and remote work environments?

   • ABecause the network boundary becomes less defined when users and data are outside the corporate network
   • BBecause cloud environments are inherently insecure
   • CBecause remote workers are always less secure than on-site workers
   • DBecause cloud providers do not offer any security controls
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company uses a SaaS application for HR. Employees access it from home and from the office. The security team wants to enforce conditional access policies based on user risk. Which limitation of the perimeter model is most relevant?

   • AThe perimeter cannot provide a VPN.
   • BThe perimeter cannot see or control traffic to the SaaS application.
   • CThe perimeter cannot encrypt data at rest.
   • DThe perimeter cannot manage user passwords.
   Reveal Solution Discussion Select an answer first