Which control is most appropriate for protecting a cloud workload that runs as a containerized microservice?

A single shared access key for all microservices in the cluster

A workload identity with permissions limited to the microservice's required actions

Network security group (NSG) rules that allow all inbound traffic from any source

Disabling all logging for the workload to reduce overhead

In a hybrid cloud Zero Trust design, what is a common approach to extend identity verification to on-premises resources?

Using a single identity provider (IdP) that integrates with both cloud and on-premises systems

Disabling MFA for on-premises users to simplify access

Maintaining separate identity stores for cloud and on-premises

Using a single shared password for all users

What is the purpose of data loss prevention (DLP) in a Zero Trust data protection strategy?

To store data in multiple locations for redundancy

To detect and prevent unauthorized sharing or exfiltration of sensitive data

To replace the need for encryption

To increase the speed of data access for all users

A company uses multiple cloud providers and wants to maintain a consistent Zero Trust posture across all of them. They want to automate the enforcement of security policies, such as requiring encryption for all storage accounts and blocking public access to databases. Which solution should they implement?

Use a cloud access security broker (CASB) to control access to cloud applications.

Use each cloud provider's native policy service (e.g., AWS Organizations, Azure Policy) and manually align the policies.

Create a custom script that runs on a schedule to check for misconfigurations in each cloud and sends alerts.

Use a multi-cloud policy management tool that can define and enforce policies across AWS, Azure, and Google Cloud.

What is the primary purpose of conditional access policies in a Zero Trust cloud IAM strategy?

To evaluate signals such as user identity, device compliance, and location before granting access

To simplify access by using a single shared password for all users

To provide users with permanent access to all cloud resources

To replace the need for multi-factor authentication (MFA)

Dell Zero Trust Design

Domain 7Objective 1

Design Zero Trust for the Cloud ZERO-TRUST-DESIGN Practice Questions (Page 4)

Part of the Zero Trust for the Cloud domain, which accounts for 4% of the ZERO-TRUST-DESIGN exam.

23questions here

5free pages

7concepts

4%of the exam

Questions 16–20

16foundation · easy
Which control is most appropriate for protecting a cloud workload that runs as a containerized microservice?
Select an answer first
17foundation · easy
In a hybrid cloud Zero Trust design, what is a common approach to extend identity verification to on-premises resources?
Select an answer first
18foundation · easy
What is the purpose of data loss prevention (DLP) in a Zero Trust data protection strategy?
Select an answer first
19application · medium
A company uses multiple cloud providers and wants to maintain a consistent Zero Trust posture across all of them. They want to automate the enforcement of security policies, such as requiring encryption for all storage accounts and blocking public access to databases. Which solution should they implement?
Select an answer first
20foundation · easy
What is the primary purpose of conditional access policies in a Zero Trust cloud IAM strategy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ZERO-TRUST-DESIGN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Dell Technologies. “ZERO-TRUST-DESIGN” is a trademark of its owner, used for identification only.