What is the key feature of identity-aware networking?

The network automatically assigns IP addresses based on user roles.

Users must authenticate to the network using a one-time password (OTP).

Network traffic is encrypted using the user's public key.

Network access decisions are based on the user's identity and device, not just IP addresses.

A financial services firm is designing a Zero Trust network. They need to protect data in transit between their on-premises data center and a cloud-based application. Which solution best ensures the confidentiality and integrity of this traffic?

Establish an IPsec VPN tunnel between the data center and the cloud provider.

Rely on the cloud provider's default encryption for storage.

Implement a NAC solution that verifies device posture before allowing traffic.

Use a TLS certificate on the web application only.

A company wants to ensure that only corporate-managed laptops with up-to-date antivirus and a valid user login can access the internal Wi-Fi network. Which technology should they implement?

802.1X authentication with certificates on each device.

Network Access Control (NAC) that checks device posture and user identity before granting access.

A firewall rule that blocks all traffic from unknown IP addresses.

A VPN that requires a username and password for all remote connections.

A healthcare provider is implementing Zero Trust networking. They need to ensure that patient data transmitted between clinics and the central hospital is encrypted. Which of the following is the most appropriate solution?

Deploy a NAC solution to ensure only compliant devices can access the network.

Use HTTPS for all web-based applications that access patient data.

Encrypt the patient data at rest in the databases.

Implement a site-to-site VPN with strong encryption between each clinic and the hospital.

A company is implementing micro-segmentation in its data center. They have a legacy application that cannot be modified to support modern authentication. The application must communicate with a database server, but the security team wants to limit the application's exposure. What is the best approach?

Allow the legacy application to communicate with any server in the data center.

Use a NAC solution to check the posture of the legacy application server before allowing communication.

Place the legacy application and database in a separate segment and allow traffic only between them on the required ports.

Encrypt all traffic between the legacy application and the database.

Dell Zero Trust Design

Domain 4Objective 1

Design Zero Trust Networks ZERO-TRUST-DESIGN Practice Questions (Page 5)

Part of the Zero Trust in Networks domain, which accounts for 12% of the ZERO-TRUST-DESIGN exam.

33questions here

7free pages

7concepts

12%of the exam

Questions 21–25

21foundation · easy
What is the key feature of identity-aware networking?
Select an answer first
22application · medium
A financial services firm is designing a Zero Trust network. They need to protect data in transit between their on-premises data center and a cloud-based application. Which solution best ensures the confidentiality and integrity of this traffic?
Select an answer first
23application · medium
A company wants to ensure that only corporate-managed laptops with up-to-date antivirus and a valid user login can access the internal Wi-Fi network. Which technology should they implement?
Select an answer first
24application · medium
A healthcare provider is implementing Zero Trust networking. They need to ensure that patient data transmitted between clinics and the central hospital is encrypted. Which of the following is the most appropriate solution?
Select an answer first
25expert · hard
A company is implementing micro-segmentation in its data center. They have a legacy application that cannot be modified to support modern authentication. The application must communicate with a database server, but the security team wants to limit the application's exposure. What is the best approach?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ZERO-TRUST-DESIGN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Dell Technologies. “ZERO-TRUST-DESIGN” is a trademark of its owner, used for identification only.