Design Zero Trust Networks ZERO-TRUST-DESIGN Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   How does analytics contribute to Zero Trust network security?

   • ABy identifying abnormal behavior that may indicate a compromised device or user.
   • BBy encrypting data so that it cannot be read by unauthorized parties.
   • CBy automatically patching vulnerabilities in network devices.
   • DBy providing a backup of network configuration files.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In a Zero Trust network, what does 'verify explicitly' mean?

   • APerform a single strong authentication at the network edge and then allow access.
   • BRequire users to confirm their identity each time they access a new website.
   • CUse encryption to ensure that data cannot be intercepted during transmission.
   • DAuthenticate and authorize based on all available data points before allowing access.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company has implemented Zero Trust network access. The security team wants to continuously monitor user behavior and network traffic to detect anomalies that could indicate a compromised account. Which tool should they use?

   • AA network access control (NAC) solution that checks device posture.
   • BA traditional firewall that logs all blocked traffic.
   • CA user and entity behavior analytics (UEBA) tool that analyzes logs and network flows.
   • DA vulnerability scanner that checks for missing patches.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A global company is implementing identity-aware networking. They have offices in multiple countries and need to comply with data residency regulations that require certain data to stay within specific geographic boundaries. How should they design their identity-aware networking to meet this requirement?

   • AAllow all users to access all data, but encrypt it in transit.
   • BDeploy separate networks for each country and do not allow any cross-border traffic.
   • CUse identity-based policies that restrict access to data based on the user's location and the data's residency requirements.
   • DUse a single global identity provider and ignore geographic boundaries.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A large enterprise is designing a Zero Trust network. They have a requirement to minimize the risk of compromised credentials being used to access sensitive systems. However, they also need to maintain high availability for those systems. Which approach best balances these requirements?

   • ARequire multi-factor authentication for every access request to sensitive systems.
   • BImplement adaptive access policies that require step-up authentication when risk indicators are detected, while allowing normal access for low-risk sessions.
   • CUse a VPN for all access to sensitive systems and rely on the VPN's encryption.
   • DDeploy a SIEM to monitor for compromised credentials and respond after the fact.
   Reveal Solution Discussion Select an answer first