Design Identity Based Zero Trust ZERO-TRUST-DESIGN Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the primary benefit of using role-based access control (RBAC) to manage permissions?

   • AIt automatically grants all permissions to new users
   • BIt eliminates the need for user authentication
   • CIt simplifies access management by assigning permissions to roles rather than individuals
   • DIt allows users to define their own permissions
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   In a Zero Trust identity architecture, what is the role of a policy engine?

   • ATo provide a user interface for administrators
   • BTo encrypt data at rest
   • CTo evaluate access requests against policies and make allow or deny decisions
   • DTo store user credentials securely
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which of the following is an example of a multi-factor authentication factor?

   • AA one-time passcode sent to the user's mobile phone
   • BThe user's username
   • CThe user's department
   • DThe user's IP address
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company has a high turnover rate in its sales department. When sales reps leave, their accounts are often not disabled promptly, leading to security risks. The company wants to ensure that access is revoked as soon as an employee leaves, and that any access that was granted to the departing employee is also removed from other systems. What should they implement?

   • AA conditional access policy that blocks access from terminated employees based on their HR status
   • BA policy that requires all employees to change their passwords every 30 days
   • CAn automated identity lifecycle management process that disables the account and removes group memberships when the employee is marked as terminated in HR
   • DA manual process where the manager sends an email to IT to disable the account
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the purpose of a conditional access policy in a Zero Trust identity design?

   • ATo replace the need for multi-factor authentication
   • BTo manage the lifecycle of user accounts
   • CTo evaluate signals such as user, device, location, and risk to decide whether to grant access
   • DTo provide a single sign-on experience across applications
   Reveal Solution Discussion Select an answer first