Describe the Significance of Moving from Perimeter Towards Zero Trust Security ZERO-TRUST-DESIGN Practice Questions (Page 4)

Questions 16–20

1. 16expert · medium

   A company has a traditional network with a strong firewall and internal segmentation. They are considering moving to Zero Trust. The CIO asks what the main driver for this change is. Which statement best explains the need?

   • AThe perimeter model is difficult for users to access.
   • BThe perimeter model cannot support cloud applications.
   • CThe perimeter model assumes internal traffic is safe, which is no longer valid with modern threats.
   • DThe perimeter model is too expensive to maintain.
   Reveal Solution Discussion Select an answer first
2. 17expert · medium

   A company has a hybrid environment with on-premises data center and cloud workloads. They currently use a firewall and VPN for remote access. The security team is concerned about the risk of lateral movement if a VPN account is compromised. Which Zero Trust control would most directly mitigate this risk?

   • AMonitor VPN logs for unusual activity.
   • BUse a longer password for VPN accounts.
   • CRequire a stronger VPN encryption algorithm.
   • DImplement micro-segmentation across all workloads.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company is implementing Zero Trust. They want to ensure that a compromised user account cannot access the entire network. Which combination of principles should they apply?

   • AStrong passwords and MFA
   • BLeast privilege and micro-segmentation
   • CNetwork monitoring and logging
   • DFirewall and antivirus
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company has migrated several applications to a public cloud and now allows employees to work remotely from personal devices. The security team still relies on a traditional firewall at the corporate internet edge to protect all resources. Which limitation of the perimeter model is most directly exposed by this environment?

   • AThe firewall cannot enforce consistent security policies for traffic that does not traverse the corporate edge.
   • BThe firewall cannot provide high availability for cloud workloads.
   • CThe firewall cannot decrypt TLS traffic from personal devices.
   • DThe firewall cannot log traffic from internal users.
   Reveal Solution Discussion Select an answer first
6. 20application · easy

   A small business has all its servers in a local data center and employees work only from the office. The network is protected by a firewall. Which characteristic of the perimeter model is most applicable here?

   • AAccess is granted based on device posture.
   • BThe internal network is considered trusted.
   • CThe network is segmented into micro-perimeters.
   • DEvery user must authenticate for each request.
   Reveal Solution Discussion Select an answer first