Discuss Need and Business Case for Zero Trust ZERO-TRUST-DESIGN Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company is planning to implement Zero Trust. The CEO asks, 'Why should we invest in this now?' Which response best communicates the business need to the CEO?

   • AZero Trust will make our IT team more efficient by automating security tasks.
   • BZero Trust reduces the risk of a costly data breach by limiting the damage an attacker can do, which protects our revenue and reputation.
   • CZero Trust will allow us to eliminate our entire security team.
   • DZero Trust is the industry standard and all our competitors are adopting it.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which compliance driver is most likely to push an organization toward Zero Trust?

   • AA requirement to use multi-factor authentication for all users
   • BA mandate to encrypt all data in transit and at rest
   • CThe need to provide evidence of access controls to auditors
   • DA requirement to use a specific cloud provider
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A healthcare organization must comply with HIPAA, which requires strict access controls to protect patient data. The IT director wants to adopt Zero Trust to meet these requirements. Which aspect of Zero Trust most directly supports HIPAA compliance?

   • AConducting annual security awareness training for all employees.
   • BContinuous verification of user identity and device health before granting access to patient records.
   • CEncrypting all data at rest and in transit using strong algorithms.
   • DDeploying a next-generation firewall to segment the network.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A manufacturing company is planning a Zero Trust rollout. The CFO is concerned about the cost, while the CTO is worried about the impact on operational technology (OT) systems. Which communication approach best gains buy-in from both stakeholders?

   • APresent a phased implementation plan that shows cost savings from reduced breach risk and includes a pilot for OT systems.
   • BFocus only on the security benefits and downplay the costs and operational impact.
   • CAsk the CFO to approve the budget first and then address the CTO's concerns during implementation.
   • DExplain that Zero Trust is mandatory and all systems must be migrated immediately.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company has a traditional security model that trusts all internal network traffic. An employee's laptop is infected with malware that spreads to other systems on the same network segment. Which limitation of the perimeter model does this demonstrate?

   • AThe malware uses encryption to evade detection.
   • BThe firewall is not updated with the latest malware signatures.
   • CThe model assumes that internal devices are trustworthy, allowing malware to spread laterally.
   • DThe company does not have an endpoint detection and response (EDR) solution.
   Reveal Solution Discussion Select an answer first