Develop a Zero Trust Implementation Roadmap ZERO-TRUST-DESIGN Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A healthcare organization is planning its Zero Trust roadmap. The compliance team needs to see progress within six months, but the network team is concerned about a big-bang rollout. The CISO wants to follow a phased approach. Which roadmap phase should come immediately AFTER the initial assessment and gap analysis?

   • ADecommission all legacy VPNs and replace them with a new remote access solution.
   • BConduct a second assessment to verify the findings of the first one.
   • CDesign the target architecture and define the prioritized initiative backlog.
   • DBegin full deployment of micro-segmentation across all network segments.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A bank has defined a roadmap milestone: 'All access to customer data must be logged and auditable.' The security team has implemented the logging. Which metric would best demonstrate that this milestone has been achieved?

   • ANumber of employees who have been trained on the logging system.
   • BNumber of security alerts generated by the logging system.
   • CTime taken to generate a report from the audit log.
   • DPercentage of customer data access events that are captured in the audit log.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is a key advantage of implementing Zero Trust in iterative increments?

   • AIt minimizes disruption by allowing changes to be tested and refined in smaller steps
   • BIt guarantees that all systems will be protected immediately
   • CIt eliminates the need for user training
   • DIt reduces the total cost of the program to zero
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A national retailer is prioritizing Zero Trust initiatives. The assessment shows a critical vulnerability in the point-of-sale (POS) system that could allow a data breach of customer payment data. The IT team has the skills to fix this, but it requires taking the POS systems offline for a full day during the holiday shopping season. The CISO must decide. What is the most appropriate action?

   • ASchedule the POS fix for the first available non-peak period and implement compensating controls (e.g., enhanced monitoring) in the meantime.
   • BAsk the IT team to work overtime to fix the POS systems during the holiday season without taking them offline.
   • CTake the POS systems offline immediately to fix the vulnerability, regardless of the impact on holiday sales.
   • DDelay the fix indefinitely until after the holiday season, with no interim measures.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A global logistics company is implementing Zero Trust. The IT team wants to avoid disrupting the 24/7 operations of the shipping department. The CISO insists on an iterative approach. Which implementation strategy best aligns with these requirements?

   • AImplement controls only in the shipping department first because it is the most critical.
   • BDelay all implementation until a new security team is hired.
   • CRoll out new controls to the IT department first, then to the shipping department in a later iteration after lessons are learned.
   • DDeploy all new controls to the entire organization during a single weekend maintenance window.
   Reveal Solution Discussion Select an answer first