Design Identity Based Zero Trust ZERO-TRUST-DESIGN Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the purpose of an access review in identity governance and administration (IGA)?

   • ATo periodically verify that users still need the access they have been granted
   • BTo replace the need for multi-factor authentication
   • CTo provide a single sign-on experience
   • DTo automatically grant all users the same level of access
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In an RBAC model, what is a role?

   • AA collection of permissions that align with a job function
   • BA set of devices that are allowed to access the network
   • CA security group used for email distribution
   • DA group of users with the same manager
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company is required by auditors to periodically review user access to sensitive systems. Currently, access reviews are done manually by managers, which is time-consuming and often incomplete. The company wants to automate the review process and ensure that any access that is not approved is automatically removed. What should they implement?

   • AA script that runs monthly to list all users with access to sensitive systems and sends an email to managers
   • BAn identity governance and administration (IGA) solution that schedules access reviews and automatically revokes unapproved access
   • CA conditional access policy that blocks access to sensitive systems unless the user has a manager's approval
   • DA policy that requires all users to re-authenticate every 30 days
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is identity federation?

   • AA method to synchronize user passwords across all systems
   • BA process to create new user accounts in every application
   • CA way to store user credentials in a central database
   • DA trust relationship that allows users to use their existing credentials to access resources in another organization or system
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A multinational company is designing a Zero Trust identity architecture. They have multiple identity providers (IdPs) across different regions and want to centralize policy enforcement while allowing regional IdPs to handle authentication locally. They also need to support external partners who use their own IdPs. Which pattern best meets these requirements?

   • AA single global IdP that authenticates all users and partners, with conditional access policies applied centrally
   • BA mesh federation where each IdP independently enforces its own policies
   • CA single IdP for employees and a separate IdP for partners, with no integration
   • DA hub-and-spoke federation model where regional IdPs authenticate users and a central policy engine evaluates access decisions
   Reveal Solution Discussion Select an answer first