Design Zero Trust for the Cloud ZERO-TRUST-DESIGN Practice Questions (Page 5)

Questions 21–23

1. 21foundation · easy

   When designing Zero Trust for a multi-cloud environment, what is a key consideration?

   • AFocusing security only on the primary cloud provider
   • BApplying consistent security policies across all cloud providers
   • CUsing a different identity system for each cloud provider
   • DRelying on each provider's default security settings
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company stores sensitive documents in a cloud storage service. They want to ensure that only users with a specific security clearance can access the documents, and that the documents are encrypted with keys managed by the company. Which combination of controls should they implement?

   • AUse a pre-signed URL for each document and enable encryption with a customer-managed key.
   • BUse identity-based access control with a custom attribute for security clearance, and enable customer-managed keys for encryption.
   • CUse a bucket policy that allows all authenticated users, and enable encryption with a service-managed key.
   • DUse a shared access key for all users and enable service-managed encryption.
   Reveal Solution Discussion Select an answer first
3. 23foundation · easy

   Which principle is a core component of a Zero Trust architecture when applied to cloud environments?

   • APerimeter-only security
   • BTrust based on IP address ranges
   • CImplicit trust for internal network traffic
   • DVerify explicitly
   Reveal Solution Discussion Select an answer first