Design Identity Based Zero Trust ZERO-TRUST-DESIGN Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which of the following is an example of an environmental attribute in ABAC?

   • AThe user's job title
   • BThe resource's classification level
   • CThe current time of day
   • DThe user's department
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company is redesigning access control for its CRM system. Currently, permissions are assigned individually to each user, leading to over-privileged accounts. The goal is to simplify management and enforce least privilege. The company has well-defined job roles such as Sales Rep, Sales Manager, and Support Agent. What should they implement?

   • AA role-based access control (RBAC) model where permissions are assigned to roles and users are added to roles based on their job function
   • BA manual process where managers request access for each employee on a case-by-case basis
   • CA policy that grants all employees access to all CRM data and relies on user training to avoid misuse
   • DAn attribute-based access control (ABAC) model that uses user attributes like department and location to determine access
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which control is typically part of a privileged access management solution?

   • ABlocking all administrative access
   • BRemoving all privileged accounts
   • CAllowing users to self-assign admin rights
   • DSession recording and monitoring of administrative actions
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is the primary goal of requiring multi-factor authentication (MFA) for user access?

   • ATo eliminate the need for passwords entirely
   • BTo speed up the login process for users
   • CTo reduce the risk of credential compromise by requiring multiple verification factors
   • DTo track user login locations for auditing
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A company has a team of system administrators who need to perform occasional high-privilege tasks, such as resetting passwords for other admins. The security team wants to ensure that these actions are not possible without approval, and that all actions are logged. They also want to avoid giving the admins permanent elevated privileges. Which solution should they implement?

   • AA role-based access control (RBAC) model that grants the admins a permanent role with the necessary permissions
   • BA privileged access management (PAM) solution that requires approval for each elevated action and records all sessions
   • CA manual process where admins submit a ticket to the security team for each task
   • DA conditional access policy that requires MFA for admin actions
   Reveal Solution Discussion Select an answer first