Design Zero Trust Networks ZERO-TRUST-DESIGN Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A hospital is implementing Zero Trust networking to protect its electronic health records (EHR) system. The security team wants to ensure that even if a workstation in the radiology department is compromised, the attacker cannot easily pivot to the EHR servers. Which approach best achieves this objective?

   • ARequire all users to use multi-factor authentication when accessing the EHR system.
   • BDeploy a next-generation firewall at the internet edge and enable intrusion prevention to block known attack patterns.
   • CPlace the EHR servers in a separate VLAN and apply firewall rules that only allow traffic from specific application servers on specific ports.
   • DEncrypt all traffic between the radiology workstations and the EHR servers using TLS.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the role of continuous monitoring in a Zero Trust network?

   • ATo detect anomalies and enforce policies in real time.
   • BTo periodically review firewall rules on a monthly basis.
   • CTo ensure that all devices have the latest operating system updates.
   • DTo replace the need for encryption by monitoring all traffic.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A security team is implementing Zero Trust monitoring. They want to detect a potential data exfiltration attempt where an attacker is slowly transferring data from a compromised server to an external IP address. Which monitoring approach is most effective?

   • AAnalyze network flow logs for unusual patterns, such as a server sending data to an external IP at odd hours.
   • BMonitor only inbound traffic to the server.
   • CUse a signature-based intrusion detection system (IDS) to match known attack patterns.
   • DRely on the server's built-in logging to detect unauthorized access.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   When integrating Zero Trust with existing network infrastructure, what is a key consideration?

   • AThe solution must work with legacy systems and hybrid architectures without weakening security.
   • BThe network must be isolated from the internet to be secure.
   • CAll legacy systems must be replaced with modern hardware.
   • DOnly cloud environments can support Zero Trust.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   How does micro-segmentation help contain a breach?

   • ABy encrypting all traffic so that even if an attacker moves laterally, the data is unreadable.
   • BBy monitoring all traffic and alerting administrators to any suspicious activity.
   • CBy isolating workloads and applying granular policies so that a compromised workload cannot reach others.
   • DBy creating a demilitarized zone (DMZ) for all external-facing services.
   Reveal Solution Discussion Select an answer first