Design Data Centric Zero Trust ZERO-TRUST-DESIGN Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the principle of least privilege in the context of data access policies?

   • AGranting users the same access as their manager
   • BGranting users access to all data by default
   • CGranting users access based on their seniority
   • DGranting users the minimum level of access necessary to perform their job functions
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary goal of continuous monitoring and analytics for data in a Zero Trust design?

   • ATo detect anomalous data access patterns and potential exfiltration attempts
   • BTo encrypt data in transit
   • CTo manage user access permissions
   • DTo automatically classify data based on its content
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   In a Zero Trust data lifecycle, what is the purpose of a data retention policy?

   • ATo encrypt data at rest
   • BTo monitor data access in real time
   • CTo define how long data must be kept to meet business and compliance requirements
   • DTo classify data based on its sensitivity
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company is implementing data classification for Zero Trust. They have a large amount of data, some of which is highly sensitive (e.g., intellectual property) and some of which is public (e.g., marketing brochures). They want to ensure that the sensitive data is protected with stronger controls than the public data. What is the most effective way to achieve this?

   • AStore all data in a single repository and rely on access control lists (ACLs) to restrict access to sensitive data.
   • BUse a data loss prevention (DLP) policy that blocks all outbound transfers of any data, regardless of classification.
   • CEncrypt all data with the same encryption algorithm and key, regardless of sensitivity.
   • DDefine a classification taxonomy with levels such as 'Public', 'Internal', 'Confidential', and 'Restricted', and apply sensitivity labels to data accordingly.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A retail company processes credit card payments and stores cardholder data in a legacy on-premises database. They are designing a Zero Trust architecture and want to minimize the risk of a data breach if the database is compromised. They also need to maintain the ability to perform analytics on transaction trends without exposing full card numbers. Which data protection approach best meets these requirements?

   • AUse format-preserving encryption (FPE) on the card numbers and share the encryption key with the analytics team so they can decrypt when needed.
   • BMask the card numbers in the database by replacing the first 12 digits with asterisks, and store the full numbers in a separate table accessible only to the payment gateway.
   • CTokenize the card numbers, storing the actual values in a separate, highly secured token vault, and use the tokens for analytics and business operations.
   • DEncrypt the entire database with transparent data encryption (TDE) and grant the analytics team read-only access to the encrypted data.
   Reveal Solution Discussion Select an answer first