Design Zero Trust Networks ZERO-TRUST-DESIGN Practice Questions (Page 7)

Questions 31–33

1. 31expert · hard

   A company is integrating Zero Trust with its existing Active Directory (AD) infrastructure. They want to use identity-aware networking but also need to support legacy applications that only use LDAP for authentication. Which approach is most effective?

   • ADisable LDAP and require all applications to use Kerberos.
   • BReplace all legacy applications with modern ones that support SAML or OAuth.
   • CDeploy an identity-aware network solution that integrates with AD and can translate LDAP authentication requests into modern identity-based policies.
   • DUse a separate identity store for legacy applications.
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A hospital is implementing NAC to control access to its network. They have a mix of managed and unmanaged devices (e.g., personal smartphones of doctors). They want to allow unmanaged devices to access the internet but not internal patient records. Which NAC configuration best achieves this?

   • ARequire all unmanaged devices to install a mobile device management (MDM) agent before accessing any network.
   • BPlace unmanaged devices in a guest VLAN with internet-only access, and managed devices in a trusted VLAN with access to internal resources.
   • CAllow unmanaged devices on the trusted VLAN but restrict access to patient records via application-level controls.
   • DBlock all unmanaged devices from the network entirely.
   Reveal Solution Discussion Select an answer first
3. 33application · medium

   An organization is adopting a Zero Trust network model. They want to ensure that every access request to internal applications is authenticated and authorized, regardless of the user's location. Which principle should they implement?

   • ATrust users on the corporate network and only verify remote users.
   • BImplement a strong firewall policy that blocks all inbound traffic.
   • CVerify every request as if it originates from an untrusted network.
   • DUse a VPN for all remote access and trust internal traffic.
   Reveal Solution Discussion Select an answer first