Describe the Tenets of Zero Trust ZERO-TRUST-DESIGN Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company is moving from a flat network to a Zero Trust architecture. They want to ensure that a compromised application server cannot directly reach the database server. Which architectural principle should they apply?

   • AContinuous verification
   • BPolicy-based access controls
   • CMicro-segmentation
   • DIdentity-centric security
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   How does Zero Trust differ from traditional perimeter-based security?

   • AZero Trust verifies every access request, while traditional security trusts users inside the network.
   • BZero Trust trusts internal users, while traditional security trusts external users.
   • CZero Trust is only for cloud environments, while traditional security is for on-premises.
   • DZero Trust relies on a strong perimeter, while traditional security uses micro-segmentation.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the purpose of micro-segmentation in a Zero Trust architecture?

   • ATo isolate workloads and limit lateral movement
   • BTo create larger network segments for easier management
   • CTo combine all network traffic into a single security zone
   • DTo replace firewalls with software-defined networking
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A mid-sized company wants to implement Zero Trust but has limited budget and staff. They are concerned about the complexity of a full deployment. Which approach best aligns with Zero Trust implementation best practices?

   • AImplement all pillars simultaneously to avoid gaps.
   • BStart with a pilot project on a critical application and expand gradually.
   • CFocus only on the network pillar since it is the most important.
   • DDeploy a single vendor's Zero Trust product to solve all problems.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A user connects to the corporate network from a coffee shop and then later from the office. In a Zero Trust model, how should their access be treated?

   • ABoth connections should be verified and authorized based on the same policies.
   • BThe coffee shop connection should be blocked because it is untrusted.
   • CThe office connection should be trusted more because it is inside the network.
   • DThe office connection should be allowed without verification because it is on the LAN.
   Reveal Solution Discussion Select an answer first