Design Data Centric Zero Trust ZERO-TRUST-DESIGN Practice Questions (Page 6)

Questions 26–27

1. 26application · medium

   A company is implementing Zero Trust for data in transit. They have a mix of on-premises applications and cloud services, and they need to ensure that data is protected as it moves between these environments. Which control should they prioritize?

   • AUse a VPN for all remote access to the corporate network, but allow internal traffic to be unencrypted.
   • BDeploy a data loss prevention (DLP) solution that inspects outbound emails for sensitive data.
   • CUse TLS 1.2 or higher for all communication between clients and servers, and enforce HTTPS for web-based applications.
   • DEncrypt data at rest using BitLocker on all servers and client devices.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   An organization is adopting Zero Trust and needs to inventory all data assets, including data stored in legacy on-premises file servers, cloud storage, and SaaS applications. They want to establish a baseline for protection. Which tool or approach should they use?

   • ADeploy a data loss prevention (DLP) solution that only monitors outbound email traffic.
   • BUse a cloud access security broker (CASB) to discover and classify data in cloud applications, and use on-premises data discovery tools for file servers.
   • CEncrypt all data at rest using a centralized key management system, and assume that encryption provides sufficient protection.
   • DManually create a spreadsheet listing all known data stores and their contents.
   Reveal Solution Discussion Select an answer first