Develop a Zero Trust Implementation Roadmap ZERO-TRUST-DESIGN Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the primary benefit of securing executive sponsorship for a Zero Trust roadmap?

   • AIt provides the authority and resources needed to drive cross-departmental changes
   • BIt eliminates the need for technical testing during implementation
   • CIt guarantees that all security incidents will be prevented
   • DIt automatically reduces the total cost of the implementation
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A consulting firm is performing a Zero Trust current-state assessment. They have inventoried all users, devices, and applications. The next step is to map the data flows between these assets. Why is this step critical to the assessment?

   • AIt is required to calculate the total cost of the Zero Trust implementation.
   • BIt helps determine the number of firewalls needed at the network perimeter.
   • CIt is necessary to identify which employees should be laid off.
   • DIt identifies which users and devices need access to which data, which is essential for defining least-privilege policies.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A hospital is conducting a current-state assessment for Zero Trust. The team discovers that the medical devices (e.g., MRI machines, infusion pumps) are on the same network segment as the administrative workstations. The assessment team needs to document this finding. How should this be categorized in the gap analysis?

   • AA lack of endpoint detection and response (EDR) on the medical devices.
   • BA lack of micro-segmentation between IoT/OT devices and IT systems.
   • CA lack of a data loss prevention (DLP) solution for patient records.
   • DA lack of multi-factor authentication for administrative users.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A retail company is planning a Zero Trust roadmap. The board of directors has approved the budget, but the head of the e-commerce division is resistant because they fear new security checks will slow down the online checkout process. The CISO needs to align this stakeholder. What is the most effective approach?

   • AExplain that security requirements are non-negotiable and must be implemented as designed.
   • BInvolve the e-commerce division head in the design of the checkout flow's security controls to balance security and user experience.
   • CImplement the security controls in the e-commerce platform without informing the division head.
   • DDefer all security changes to the e-commerce platform until the next fiscal year.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A manufacturing company's CISO wants to launch a Zero Trust roadmap. The CFO is concerned about the budget, and the VP of Operations is worried that new security controls will slow down production-line workers. The CISO needs to secure executive sponsorship. What is the most effective FIRST step for the CISO?

   • ARequest a large budget increase to purchase a comprehensive Zero Trust platform.
   • BMandate that all production workers use a new hardware token for authentication immediately.
   • CPresent a business-aligned risk assessment that maps security gaps to potential production downtime and financial loss.
   • DCreate a detailed technical architecture diagram and share it with the IT team only.
   Reveal Solution Discussion Select an answer first