Develop a Zero Trust Implementation Roadmap ZERO-TRUST-DESIGN Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A manufacturing firm is implementing Zero Trust iteratively. The first iteration was to enforce MFA for all remote access, which was successful. The next iteration is to implement conditional access policies that restrict access based on user location and device state. However, the plant floor workers use shared kiosk computers that are not individually assigned. The IT team is concerned that these kiosks will be blocked by the new policies. What is the best approach for this iteration?

   • AApply the same conditional access policy to the kiosks and see which workers are blocked.
   • BExclude the kiosk computers from all conditional access policies to avoid disruption.
   • CCreate a separate conditional access policy for the kiosk computers that requires a shared device account and additional session controls.
   • DAssign a personal device to each plant floor worker to replace the kiosks.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which sequence best represents the typical phases of a Zero Trust implementation roadmap?

   • ADeployment, assessment, optimization, architecture design
   • BOptimization, assessment, deployment, architecture design
   • CAssessment, architecture design, phased deployment, continuous optimization
   • DArchitecture design, deployment, assessment, optimization
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the purpose of defining milestones in a Zero Trust roadmap?

   • ATo provide checkpoints for evaluating progress and adjusting plans
   • BTo assign blame if the project fails
   • CTo guarantee that the implementation will be completed on time
   • DTo replace the need for continuous monitoring
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A university is starting a Zero Trust assessment. The team has identified that faculty can access the student records database from any device on the network, and there is no visibility into which devices are compromised. The assessment team needs to document a gap. Which statement best describes this gap in Zero Trust terms?

   • AThe network is flat, and there is no continuous verification of device health before granting access to sensitive data.
   • BThe university does not have a firewall at the network perimeter.
   • CThe student records database is not encrypted at rest.
   • DThe faculty are not using strong passwords.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A large enterprise has a Zero Trust roadmap approved by the CISO. However, the VP of Human Resources is concerned that the new continuous monitoring of user behavior will be perceived as invasive by employees. The VP of Engineering is concerned that the roadmap does not address the security of the company's intellectual property in the code repositories. The CISO needs to maintain momentum. What is the most effective way to address these concerns?

   • AReassure the VPs that the roadmap is final and that their concerns will be handled in a later phase.
   • BFocus only on the code repository security and postpone the user monitoring program.
   • CEscalate the concerns to the CEO and ask for a directive to proceed.
   • DAdjust the roadmap to include a privacy impact assessment for the monitoring program and add a workstream for protecting code repositories.
   Reveal Solution Discussion Select an answer first