Develop a Zero Trust Implementation Roadmap ZERO-TRUST-DESIGN Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which activity is a key step in assessing the current security architecture for Zero Trust readiness?

   • ADeploying endpoint detection and response agents to all devices
   • BImmediately replacing all legacy VPNs with modern remote access solutions
   • CDefining the target architecture before reviewing the current environment
   • DMapping data flows and identifying where sensitive data resides
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A mid-sized law firm has completed its Zero Trust assessment. The findings show: (1) legacy file shares are accessible to all employees, (2) the firm's most valuable data is client case files, (3) the IT team is small and has no experience with micro-segmentation, and (4) the partners want to see a quick win within 90 days. The firm must balance risk reduction, effort, and stakeholder expectations. Which initiative should be prioritized FIRST?

   • AConduct a second, more detailed assessment of the network architecture.
   • BDeploy a full micro-segmentation solution across the entire network.
   • CReplace the legacy file shares with a new cloud storage system.
   • DImplement a data classification and access control policy for the client case file shares.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A financial services firm has completed the first phase of its Zero Trust roadmap: MFA is now enforced for all remote users. The steering committee wants to measure the success of this phase. Which metric is the most meaningful indicator of progress for this specific initiative?

   • ATotal number of security incidents reported in the quarter.
   • BNumber of help desk tickets related to password resets.
   • CPercentage of remote user sign-ins that are challenged with MFA and successfully verified.
   • DPercentage of remote users who successfully complete MFA on their first attempt.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which action best supports stakeholder alignment for a Zero Trust roadmap?

   • ACommunicating the business rationale and expected benefits to all affected teams
   • BImplementing all changes without seeking feedback
   • CKeeping the roadmap confidential until deployment is complete
   • DFocusing only on the security team's input
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A software company is implementing Zero Trust iteratively. The first increment (MFA for all employees) was successful. The second increment is planned to be device compliance enforcement for all corporate laptops. However, the sales team uses personal devices that cannot be enrolled in the management system. The CISO wants to maintain security without blocking the sales team's productivity. What is the best approach for this iteration?

   • ADelay device compliance enforcement until all employees have corporate devices.
   • BApply device compliance enforcement only to corporate laptops and provide a separate, more restrictive access path for personal devices.
   • CBlock all access from personal devices to enforce the new policy strictly.
   • DRequire all sales team members to purchase a corporate laptop before the next quarter.
   Reveal Solution Discussion Select an answer first